**[Tamas Cservenak](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=cstamas)** opened **[MRESOLVER-406](https://issues.apache.org/jira/browse/MRESOLVER-406?redirect=false)** and commented The older versions trigger nasty CVE reports. No real effect, as this is really just a test dependency. --- **Remote Links:** - [GitHub Pull Request #332 ](https://github.com/apache/maven-resolver/pull/332)