Hi All, According to GitHub Advisory Database, I should update *net.sourceforge.htmlunit* to at least* 2.37.0* in order to fix *CVE-2020-5529*.
My problem is once I do that and run mvn compile, maven enforcer blocks due to: *[INFO] Restricted to JDK 1.7 yet net.sourceforge.htmlunit:neko-htmlunit:jar:2.42.0:compile contains net/sourceforge/htmlunit/cyberneko/filters/DefaultFilter.class targeted to JDK 1.8* Should I fix the security issue? If so, how should I proceed? Thanks, Tzach -- You received this message because you are subscribed to the Google Groups "Jenkins Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/f5938e1c-77c3-4852-a7fd-5712771a016an%40googlegroups.com.
