[ https://issues.apache.org/jira/browse/TAP5-2765?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17778129#comment-17778129 ]
Hudson commented on TAP5-2765: ------------------------------ SUCCESS: Integrated in Jenkins build Tapestry ยป tapestry-java-11-temurin-freestyle #5 (See [https://ci-builds.apache.org/job/Tapestry/job/tapestry-java-11-temurin-freestyle/5/]) TAP5-2765: Upgrade Underscore.js to version 1.13.6 (#45) (github: rev 9c2209b2f15681e8b46996d67c76dfc6ae2435bd) * (delete) tapestry-core/src/main/resources/META-INF/assets/tapestry5/underscore-1.8.3.js * (edit) tapestry-core/src/main/java/org/apache/tapestry5/modules/JavaScriptModule.java * (add) tapestry-core/src/main/resources/META-INF/assets/tapestry5/underscore-1.13.6.js > Update Underscore.js > -------------------- > > Key: TAP5-2765 > URL: https://issues.apache.org/jira/browse/TAP5-2765 > Project: Tapestry 5 > Issue Type: Improvement > Components: tapestry-core > Reporter: Ben Weidig > Assignee: Ben Weidig > Priority: Major > Fix For: 5.8.4 > > > Underscore.js should be upgraded to the current version due to > [CVE-2021-23358|https://nvd.nist.gov/vuln/detail/CVE-2021-23358] > Originated in[ GitHub PR #45|https://github.com/apache/tapestry-5/pull/45] -- This message was sent by Atlassian Jira (v8.20.10#820010)