You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@maven.apache.org by "Pratiksha Kumbharkar (Jira)" <ji...@apache.org> on 2021/09/17 05:41:00 UTC

[jira] [Created] (MNG-7256) Maven version 3.8.2 has jsoup vulnerability

Pratiksha Kumbharkar created MNG-7256:
-----------------------------------------

             Summary: Maven version 3.8.2 has jsoup vulnerability
                 Key: MNG-7256
                 URL: https://issues.apache.org/jira/browse/MNG-7256
             Project: Maven
          Issue Type: Bug
            Reporter: Pratiksha Kumbharkar


Hi Team,

We are facing jsoup component vulnerability with maven version 3.8.2 which is the latest released version of maven. The CVE details are: CVE-2021-37714

Can you please provide the details of next maven version release with this fix in it.

 

Thanks & Regards,

Pratiksha.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)