You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@maven.apache.org by "A Leponzo (Jira)" <ji...@apache.org> on 2021/12/09 16:55:00 UTC

[jira] [Comment Edited] (DOXIASITETOOLS-230) Upgrade to Velocity Engine 2.x and Velocity Tools 3.x

    [ https://issues.apache.org/jira/browse/DOXIASITETOOLS-230?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17456563#comment-17456563 ] 

A Leponzo edited comment on DOXIASITETOOLS-230 at 12/9/21, 4:54 PM:
--------------------------------------------------------------------

Please update doxia-site-renderer to use velocity-tools:3.0 since velocity-tools:2.0 contains commons-beanutils:1.7.0, which is [vulnerable|https://www.cve.org/CVERecord?id=CVE-2014-0114].


was (Author: leponzo):
Please update `doxia-site-renderer` to use `velocity-tools:3.0` since `velocity-tools:2.0` contains `commons-beanutils:1.7.0`, which is [vulnerable|https://www.cve.org/CVERecord?id=CVE-2014-0114].

> Upgrade to Velocity Engine 2.x and Velocity Tools 3.x
> -----------------------------------------------------
>
>                 Key: DOXIASITETOOLS-230
>                 URL: https://issues.apache.org/jira/browse/DOXIASITETOOLS-230
>             Project: Maven Doxia Sitetools
>          Issue Type: Dependency upgrade
>            Reporter: Sylwester Lachiewicz
>            Priority: Major
>              Labels: Java8
>




--
This message was sent by Atlassian Jira
(v8.20.1#820001)