afs commented on PR #3906: URL: https://github.com/apache/jena/pull/3906#issuecomment-4499684556
I can't give you a formal response. Use of Fuseki is under the terms of [the license](https://www.apache.org/licenses/LICENSE-2.0). All open source licenses have similar provisions; otherwise, open source would not exist. It is up to Seitenbau to verify and endorse that the software is fit for purpose as part of any contract with a customer. The two CVEs you point out are not Java related as far as I can determin - that's no more than a personal opinion. There should not be any code related to them in Fuseki. That can be checked by looking inside the Fuseki jar file. @seitenbau-govdata does not have anything publicly visible in it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
