[CURATOR-684] Update dependencies: org.jboss.resteasy
Open
imported-jira-issue
rfe
- Dominant language
- Java
- Stars
- 3.2k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
Curator has this dependency:
org.jboss.resteasy
resteasy-jaxrs
2.3.5.Final
That dependency bring CVEs:
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6346 (denial of service)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7839 (XML external entity (XXE) attacks)
---
Originally reported by slavikca, imported from: Update dependencies: org.jboss.resteasy
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.