[jira] [Commented] (MWAR-456) Latest maven-war-plugin causing vulnerable .jars to be downloaded

2022-10-10 Thread Brent Shikoski (Jira)
[ https://issues.apache.org/jira/browse/MWAR-456?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17615374#comment-17615374 ] Brent Shikoski commented on MWAR-456: - I believe it is fixed on master, the version of

[jira] [Commented] (MWAR-456) Latest maven-war-plugin causing vulnerable .jars to be downloaded

2022-10-07 Thread Brent Shikoski (Jira)
[ https://issues.apache.org/jira/browse/MWAR-456?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17614257#comment-17614257 ] Brent Shikoski commented on MWAR-456: - I don't know about plexus-utils-2.0.5, but maven