You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@sling.apache.org by "Eric Norman (Jira)" <ji...@apache.org> on 2023/10/19 00:25:00 UTC

[jira] [Created] (SLING-12106) Bump dependencies to the earliest versions without known vulnerabilities

Eric Norman created SLING-12106:
-----------------------------------

             Summary: Bump dependencies to the earliest versions without known vulnerabilities
                 Key: SLING-12106
                 URL: https://issues.apache.org/jira/browse/SLING-12106
             Project: Sling
          Issue Type: Improvement
            Reporter: Eric Norman
            Assignee: Eric Norman
             Fix For: JCR Jackrabbit User Manager 2.2.28


Mostly to keep tooling from flagging these as "vulnerabilities from dependencies"
 # bump org.apache.sling.servlets.post to 2.3.22
 # bump org.apache.sling.jcr.base to 3.1.12



--
This message was sent by Atlassian Jira
(v8.20.10#820010)