nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Activiti Dependencies - Security Vulnerabilities

steve_gioberti

We are running with Activiti version 6.0.0, and are noticing that security scans reveal security vulnerabilities with the following two transitive dependencies:

com.fasterxml.jackson.core : jackson-databind : 2.7.5
org.apache.commons : commons-email : 1.4

In both cases I notice that there are later versions of these libraries available. In the case of jackson-databind, version 2.9.6 ; and in the case of commons-email, version 1.5.

Are there plans to upgrade these dependencies in future releases of activiti?

Find more posts tagged with

Alfresco Process Services

Comments

bassam_al-saror

These libs have been upgraded in the latest code base of 6.x branch

Activiti/pom.xml at 6.x · Activiti/Activiti · GitHub

steve_gioberti

Bassam,

Many thanks for this. Really appreciate the good news, and the prompt reply.

Regards

Steve Gioberti