You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@karaf.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2025/07/27 09:05:00 UTC

[jira] [Commented] (KARAF-7947) Karaf: Upgrade org.apache.felix.cm.json due to vulnerability

    [ https://issues.apache.org/jira/browse/KARAF-7947?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18010185#comment-18010185 ] 

ASF GitHub Bot commented on KARAF-7947:
---------------------------------------

jbonofre opened a new pull request, #1975:
URL: https://github.com/apache/karaf/pull/1975

   (no comment)




> Karaf: Upgrade org.apache.felix.cm.json due to vulnerability
> ------------------------------------------------------------
>
>                 Key: KARAF-7947
>                 URL: https://issues.apache.org/jira/browse/KARAF-7947
>             Project: Karaf
>          Issue Type: Dependency upgrade
>          Components: karaf
>            Reporter: Martin Lichtin
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>
> Karaf: Upgrade org.apache.felix.cm.json due to vulnerability
> Version org.apache.felix.cm.json-1.0.6.jar is marked with a vulnerability 
> The vulnerability looks like a red-herring, but still users complain, and it will be easier if we could use a slightly newer version.
> [Maven Repository: org.apache.felix » org.apache.felix.cm.json|https://mvnrepository.com/artifact/org.apache.felix/org.apache.felix.cm.json]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)