You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ofbiz.apache.org by Jacques Le Roux via dev <de...@ofbiz.apache.org> on 2026/04/11 16:34:32 UTC

[OFBIZ-13381] [SECURITY] Several CVEs in Apache Tomcat - ASF Jira

Hi,

Can someone explain me what the last commit in https://issues.apache.org/jira/browse/OFBIZ-13381 is?
It's the same than the one I did yesterday but the branch. And I did not commit it.
Is it a dependabot stuff? But then why the same commit SHA?
And I don't know  what ofbiz-plugins's branch refs/heads/dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.8 means.

TIA

Jacques

Re: [OFBIZ-13381] [SECURITY] Several CVEs in Apache Tomcat - ASF Jira

Posted by Jacques Le Roux via dev <de...@ofbiz.apache.org>.

Le 11/04/2026 à 18:34, Jacques Le Roux via dev a écrit :
> Hi,
>
> Can someone explain me what the last commit in https://issues.apache.org/jira/browse/OFBIZ-13381 is?
> It's the same than the one I did yesterday but the branch. And I did not commit it.
> Is it a dependabot stuff? But then why the same commit SHA?
> And I don't know  what ofbiz-plugins's branch refs/heads/dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.8 means.
>
> TIA
>
> Jacques
Ah, I guess it's related with https://github.com/apache/ofbiz-plugins/pull/187

But I still dont' understand why it's in OFBIZ-13381

Jacques