Le 2021-05-30 18:03, Moritz Muehlenhoff a écrit :
This was assigned CVE-2021-28170: https://github.com/eclipse-ee4j/el-ri/issues/155 https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el/
Thank you for the info. The jakarta-el-api package isn't affected by this vulnerability, it's related to the EL reference implementation which isn't built. The package provides
only the API. Emmanuel Bourg