[ https://issues.apache.org/jira/browse/AXIS2-5996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17299553#comment-17299553 ]
Joseph commented on AXIS2-5996: ------------------------------- Hi [~robertlazarski], Thank you for the information! We are locked into importing packages through maven unfortunately, any information on when this might be released? > Axis contains a vulnerable dependecy > ------------------------------------ > > Key: AXIS2-5996 > URL: https://issues.apache.org/jira/browse/AXIS2-5996 > Project: Axis2 > Issue Type: Bug > Affects Versions: 1.7.9 > Reporter: Joseph > Priority: Major > Labels: security > > Axis 2 is dependent on Apache Client 4.5.3 which is vulnerable to > CVE-2020-13956 -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.org