Le 2021-05-30 18:03, Moritz Muehlenhoff a écrit :

This was assigned CVE-2021-28170:
https://github.com/eclipse-ee4j/el-ri/issues/155
https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el/

Thank you for the info. The jakarta-el-api package isn't affected by this vulnerability, it's related to the EL reference implementation which isn't built. The package provides
only the API.

Emmanuel Bourg

Reply via email to