olamy commented on issue #1274: URL: https://github.com/apache/maven-site-plugin/issues/1274#issuecomment-4580624602
If you have a look at the vulnerable Jetty versions and which versions are fixing it. You will see the only versions available in Maven Central are 12.1.7 and 12.0.33 which are Java 17 minimum required. (the versions fixing this for 9.4.x/10.x/11.x are available only on private repository read here https://webtide.com/end-of-life-changes-to-eclipse-jetty-and-cometd/ ) So if you can convince the community here to have such requirement for the maven-site-plugin just because of the goal site-run which you are probably not even using. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
