You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@sling.apache.org by "Tatyana Vogel (Jira)" <ji...@apache.org> on 2023/10/24 10:25:00 UTC

[jira] [Created] (SLING-12118) Update Batik XML utility library to version 1.17

Tatyana Vogel created SLING-12118:
-------------------------------------

             Summary: Update Batik XML utility library to version 1.17
                 Key: SLING-12118
                 URL: https://issues.apache.org/jira/browse/SLING-12118
             Project: Sling
          Issue Type: Bug
          Components: XSS Protection API
            Reporter: Tatyana Vogel


The sling XSS library uses a vulnerable Batik XML utility library version.

Upgrade to a vulnerability-free version of the embedded library is needed.



[CVE-2022-44729|https://www.cvedetails.com/cve/CVE-2022-44729/]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)