Luc Boudreau

Hi, The comment in MONDRIAN-814 does mention 3.7, but that's the Pentaho Platform version, which corresponds to Mondrian version 3.2.1. Concerning the bug itself. I ran a couple tests on...

Can we merge this yet?

@MarijanaTR - Apache POI was upgraded to version 4.1.1 more than 2 years ago. Can you give us more details on where you are seeing a 3.X version? https://github.com/pentaho/pentaho-reporting/blame/b74afabb970d933f4d4b8dd8094d60087b436443/pom.xml#L45

Is it normal that nothing is encrypted here? I would expect all secret keys to be encrypted with the pdi encryption module.

 ### mondrian project's entity: [Team PoC Dashboard](https://app.threatrix.io/security/entity/152cdb22-7aa4-4eb4-9ecf-e3790437833f) #### Vulnerabilities |Severity|Count |--- |--- | |Medium|2| #### Licenses |Category|Count |--- |--- | |Copyleft Weak|11| #### Asset Composition |Type|Count |--- |---...

 ### mondrian project's entity: [Team PoC Dashboard](https://app.threatrix.io/security/entity/152cdb22-7aa4-4eb4-9ecf-e3790437833f) #### Vulnerabilities |Severity|Count |--- |--- | |Medium|4| #### Licenses |Category|Count |--- |--- | |Copyleft Weak|22| #### Asset Composition |Type|Count |--- |---...

 ### mondrian project's entity: [Team PoC Dashboard](https://app.threatrix.io/security/entity/152cdb22-7aa4-4eb4-9ecf-e3790437833f) #### Vulnerabilities |Severity|Count |--- |--- | |Medium|4| #### Licenses |Category|Count |--- |--- | |Copyleft Weak|22| #### Asset Composition |Type|Count |--- |---...