jackrabbit icon indicating copy to clipboard operation
jackrabbit copied to clipboard

Published 20 hours ago • verified publisher icon apache

JCR-4608 Upgrade to commons-collections4

Open rkovarik opened this issue 2 years ago • 1 comments

https://issues.apache.org/jira/browse/JCR-4608 commons-collections 3.2.2 suffers from https://advisory.checkmarx.net/advisory/vulnerability/Cx78f40514-81ff/ Although Jackrabbit itself does not seem to use SetUniqueList, it still exists on the classpath.

rkovarik avatar Sep 21 '22 13:09 rkovarik

can you try to rebase this based on what's currently in trunk?

reschke avatar Sep 22 '22 10:09 reschke

@rkovarik , @mduerig - please see https://issues.apache.org/jira/browse/JCR-4862 (which is the last non-trivial step in removing the old dependency)

reschke avatar Oct 21 '22 16:10 reschke

(OBE)

reschke avatar Jan 16 '24 14:01 reschke