Dávid Paksy created ZOOKEEPER-5085:
--------------------------------------
Summary: Remove unused vulnerable prototype.js from branch-3.9 and
branch-3.8
Key: ZOOKEEPER-5085
URL: https://issues.apache.org/jira/browse/ZOOKEEPER-5085
Project: ZooKeeper
Issue Type: Task
Components: documentation
Reporter: Dávid Paksy
Attachments: image-2026-09-01-11-27-29-800.png
OWASP dependency check found CVE in prototype.js on branch-3.9 and branch-3.8:
prototype.js (pkg:javascript/[email protected]): CVE-2020-27511(7.5)
It seems that we don't even load this file on our doc pages on these branches:
[https://github.com/apache/zookeeper/blob/branch-3.9/zookeeper-docs/src/main/resources/markdown/html/header.html#L11]
!image-2026-09-01-11-27-29-800.png!
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
