Skip to content

Conversation

@sgrampone
Copy link
Contributor

Issue:207186

Bump jaxws-rt to version 4.0.3 for jakarta and to version 2.3.7 for javaEE, latest available versions due to transitive's CVEs.

CVE-2022-40152

#GXSEC

@sgrampone sgrampone requested a review from iroqueta November 21, 2025 17:31
@sgrampone sgrampone added the dependencies Pull requests that update a dependency file label Nov 21, 2025
@genexusbot
Copy link
Collaborator

Cherry pick to beta success

@sgrampone sgrampone merged commit 7bbb8cd into master Nov 25, 2025
10 checks passed
@sgrampone sgrampone deleted the fix/bump-jaxws-rt branch November 25, 2025 13:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bot closed dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants