yesamer commented on code in PR #7217:
URL: https://github.com/apache/incubator-kie/pull/7217#discussion_r4335889776
##########
kie-parent/pom.xml:
##########
@@ -286,6 +286,8 @@
<version.org.mvel>2.5.4.Final</version.org.mvel>
<!-- Version of JMH -->
<version.org.openjdk.jmh>1.21</version.org.openjdk.jmh>
+ <!-- override ASM transitive dependency -->
+ <version.org.ow2.asm>9.11.1</version.org.ow2.asm>
Review Comment:
@jaedonP My apologies, you're right, this is actually an override. In that
case, it makes sense to add a comment describing which third-party dependencies
are pulling in the ASM versions affected by the CVE. My bad, and apologies for
the confusion. 😅
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
