New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Explorer UI CVE-2020-13936 #525

Open

mailsanchu opened this issue Mar 23, 2021 · 1 comment

mailsanchu commented Mar 23, 2021

Is it possible to upgrade velocity. Please see https://velocity.apache.org/news.html#CVE-2020-13936

rydenius commented Dec 16, 2022

I made an attempt here: #579

rydenius mentioned this issue

Hollow depends on org.apache.velocity:velocity:1.7 #578

Closed

Sunjeet mentioned this issue

tools - Upgrade apache velocity from 1x to 2x, drop apache commons codec in favor of java.util #584

Merged

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment