Hi,
Did anyone else encounter this ?
For example, I put a vulnerability-free version of commons-fileupload in the
main pom.xml:
<dependency>
<groupId>commons-fileupload</groupId>
<artifactId>commons-fileupload</artifactId>
<version>1.3.3</version>
</dependency>
While excluding the commons-fileupload everywhere else:
<exclusion>
<groupId>commons-fileupload</groupId>
<artifactId>commons-fileupload</artifactId>
</exclusion>
But IQ Server still shows commons-fileupload version 1.2 in the list.
Dependency tree in Eclipse, on the other hand, only shows version 1.3.3.
Any ideas?
Thanks,
Ofir Sonsino
Project Technical Lead, VID
AT&T Network Application Development * NetCom
Tel Aviv | Tampa | Atlanta | New Jersey |Chicago
***************************************************************************
Office: +972 (3) 5451417
Mobile: +972 (52) 4377782
E-mail: [email protected]<mailto:[email protected]>
_______________________________________________
onap-discuss mailing list
[email protected]
https://lists.onap.org/mailman/listinfo/onap-discuss
