Slavik created CURATOR-684:
------------------------------
Summary: Update dependencies: org.jboss.resteasy
Key: CURATOR-684
URL: https://issues.apache.org/jira/browse/CURATOR-684
Project: Apache Curator
Issue Type: Task
Affects Versions: 5.5.0
Reporter: Slavik
Assignee: Enrico Olivelli
Curator has this dependency:
<groupId>org.jboss.resteasy</groupId>
<artifactId>resteasy-jaxrs</artifactId>
2.3.5.Final
That dependency bring CVEs:
* [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6346] (denial of
service)
* [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7839] (XML external
entity (XXE) attacks)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)