[
https://issues.apache.org/jira/browse/MNG-7100?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17286358#comment-17286358
]
Tomasz Zasada commented on MNG-7100:
------------------------------------
It is: https://github.com/apache/maven/blob/maven-3.6.3/maven-core/pom.xml#L93
> Upgrade maven-shared-utils dependency from 3.2.1 -> 3.3.3 in maven-core
> -----------------------------------------------------------------------
>
> Key: MNG-7100
> URL: https://issues.apache.org/jira/browse/MNG-7100
> Project: Maven
> Issue Type: Dependency upgrade
> Affects Versions: 3.6.3
> Reporter: Tomasz Zasada
> Priority: Major
>
> maven-shared-utils 3.2.1 has known vulnerabilities:
> [https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEMAVENSHARED-570592.]
> Please upgrade maven-core to use 3.3.3 version of maven-shared-utils
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
