Curator has this dependency: org.jboss.resteasy resteasy-jaxrs 2.3.5.Final That dependency bring CVEs: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6346 (denial of service) https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7839 (XML external entity (XXE) attacks) --- Originally reported by slavikca, imported from: Update dependencies: org.jboss.resteasy assignee: eolivelli status: Open priority: Major resolution: Unresolved imported: 2025-01-21
Activity