Details
-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
None
-
None
-
False
-
None
-
False
-
NEW
-
NEW
-
---
-
---
Description
While examining application code with Aquascan it was found that kie-server-spring-boot-starter is exposed to following vulnerabilities:
- https://nvd.nist.gov/vuln/detail/CVT-2019-11358
- https://nvd.nist.gov/vuln/detail/CVE-2020-11022
- https://nvd.nist.gov/vuln/detail/CVE-2020-11023
The reason is that starter's transitive dependency org.kie.server:kie-server-rest-jbpm-ui is dependent on outdated version of JQuery. Solution would be to bump JQuery to 3.5.0 inside started code.
Used version: 7.72.0.Final
Could someone suggest some workaround? When we should expect the fix?
Best Regards
