You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@uima.apache.org by "Richard Eckart de Castilho (Jira)" <de...@uima.apache.org> on 2022/04/07 05:51:00 UTC

[jira] [Comment Edited] (UIMA-6430) PearPackagingMavenPlugin uses commons-io jar with CVE

    [ https://issues.apache.org/jira/browse/UIMA-6430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17518587#comment-17518587 ] 

Richard Eckart de Castilho edited comment on UIMA-6430 at 4/7/22 5:50 AM:
--------------------------------------------------------------------------

Thank you for the report. Would you like to provide a pull request with an update? (If dependabot has not already done so...)


was (Author: rec):
Thank you for the report. Would you like to provide a pull request with an update?

> PearPackagingMavenPlugin uses commons-io jar with CVE
> -----------------------------------------------------
>
>                 Key: UIMA-6430
>                 URL: https://issues.apache.org/jira/browse/UIMA-6430
>             Project: UIMA
>          Issue Type: Improvement
>            Reporter: PJ Fanning
>            Priority: Major
>
> [https://github.com/apache/uima-uimaj/blob/main/PearPackagingMavenPlugin/pom.xml]
>  
>  



--
This message was sent by Atlassian Jira
(v8.20.1#820001)