[
https://issues.apache.org/jira/browse/MCOMPILER-602?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Guillaume Nodet moved MNG-8319 to MCOMPILER-602:
------------------------------------------------
Component/s: (was: POM)
Key: MCOMPILER-602 (was: MNG-8319)
Project: Maven Compiler Plugin (was: Maven)
> Apache Maven Compiler Plugin 3.13.0 and lower version has Vulnerabilities
> from dependencies: CVE-2021-26291
> -----------------------------------------------------------------------------------------------------------
>
> Key: MCOMPILER-602
> URL: https://issues.apache.org/jira/browse/MCOMPILER-602
> Project: Maven Compiler Plugin
> Issue Type: Bug
> Reporter: henry James NR
> Priority: Critical
>
> Apache Maven Compiler Plugin 3.13.0 and lower version has Vulnerabilities
> from dependencies: CVE-2021-26291
> [Maven Repository: org.apache.maven.plugins » maven-compiler-plugin » 3.13.0
> (mvnrepository.com)|https://mvnrepository.com/artifact/org.apache.maven.plugins/maven-compiler-plugin/3.13.0]
>
> Below are some of the maven libraries this plugin refers to and these has
> Vulnerabilities.
> |gav://org.codehaus.plexus:plexus-utils:2.0.5|
> |gav://org.codehaus.plexus:plexus-utils:3.0.8|
> |gav://org.codehaus.plexus:plexus-utils:3.0.8|
> |gav://org.codehaus.plexus:plexus-utils:3.0.8|
> |gav://org.apache.maven:maven-core:2.0.9|
> |gav://org.codehaus.plexus:plexus-utils:1.1|
> |gav://org.codehaus.plexus:plexus-archiver:2.1|
> |gav://org.codehaus.plexus:plexus-utils:3.0|
> |gav://org.codehaus.plexus:plexus-utils:3.0.5|
> |gav://org.codehaus.plexus:plexus-utils:2.0.5|
> |gav://org.codehaus.plexus:plexus-utils:3.0.8|
> |gav://org.codehaus.plexus:plexus-utils:3.0.8|
> |gav://org.codehaus.plexus:plexus-utils:3.0.8|
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
