[
https://issues.apache.org/jira/browse/TOMEE-4466?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Richard Zowalla updated TOMEE-4466:
-----------------------------------
Summary: Upgrade smallrye-fault-tolerance-core to 6.4.3 (was: Upgrade
smallrye-fault-tolerance-core to 6.9.0)
> Upgrade smallrye-fault-tolerance-core to 6.4.3
> ----------------------------------------------
>
> Key: TOMEE-4466
> URL: https://issues.apache.org/jira/browse/TOMEE-4466
> Project: TomEE
> Issue Type: Dependency upgrade
> Components: TomEE Core Server
> Affects Versions: 10.0.0
> Reporter: RAJU THANNEERU
> Priority: Major
>
> New high vulnerability in one of the smallrye jar
> [https://nvd.nist.gov/vuln/detail/CVE-2025-2240]
> Looks like it is addressed in 6.9.0
> Please check and upgrade it and hopefully we can have a new tomee 10 release
> soon with this issue fixed.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)