[ https://issues.apache.org/jira/browse/SLING-7506?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16461645#comment-16461645 ]
Dan Klco commented on SLING-7506: --------------------------------- Fixed inĀ https://github.com/apache/sling-org-apache-sling-scripting-jsp-taglib/commit/5a268075a0196312bfe4656c238786f995cb99c7 > org.apache.sling.scripting.jsp.taglib: update esapi dependency > -------------------------------------------------------------- > > Key: SLING-7506 > URL: https://issues.apache.org/jira/browse/SLING-7506 > Project: Sling > Issue Type: Task > Components: Scripting > Reporter: Julian Reschke > Assignee: Dan Klco > Priority: Major > > To > https://mvnrepository.com/artifact/org.owasp.esapi/esapi/2.1.0.1 > due to the current transitive dep on > https://mvnrepository.com/artifact/org.owasp.antisamy/antisamy/1.4.3 > which has several CVEs reported against.. -- This message was sent by Atlassian JIRA (v7.6.3#76005)