[GHSA-v6x2-4q87-rf82] Improper Neutralization of Script-Related HTML Tags in a...

[oscerd]

Updates

• Affected products
• Source code location
• Summary

Comments
Title, version, package, source location

[yhidad31]

Hello @oscerd, it looks like version 10.3.0 has not yet been published to the Maven registry (see APM Webapp). In order to update the Vulnerable Version Range (VVR) with the fixed version, it needs to be published to the registry. Once the updated version has been uploaded, we can add the fixed version to the VVR.

For now, we can state that the project is vulnerable through version 10.1.0, as that is the latest version uploaded to Maven, and that the fix is available for direct download via the repository link.

Thank you for helping to improve the database.

[advisory-database]

Hi @oscerd! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!