Hi

maven-archiver is getting flagged for CVE-2023-37460
<https://nvd.nist.gov/vuln/detail/CVE-2023-37460> in our vulnerability
scans. But I am seeing the latest version of maven-archiver (3.6.0) is
still using plexus-archiver 4.4.0.

Is there any plan to upgrade plexus-archiver to 4.8.0 in maven-archiver?

Thanks

Reply via email to