igniterealtime/openfire-monitoring-plugin

JDom1/2 security warning : CVE-2021-33813

tusharj9 opened this issue · 2 comments

tusharj9 commented

Hi ,
There is high security warning created on jdom library jar which is included with this plugin . Please plan to update this jdom with security fix .

https://nvd.nist.gov/vuln/detail/CVE-2021-33813

hunterhacker/jdom#189

arelkar commented

Is there a plan to address this issue in near future? Can you share any timelines?

guusdk commented

With #210, the dependency on the rome library that was in this project was removed. Another version of the library is still pulled in transitively through the Openfire dependency though. That's something that will need to be addressed there.