Sai Pavan Marlakunta comments

Repositories
Issues
Comments

Results 2 comments of


                                            Sai Pavan Marlakunta

What is the trigger condition of CVE-2022-40156 CVE-2022-40153 CVE-2022-40154 CVE-2022-40155, XStream. fromXML? Is the version affected only when XStream.fromXML is called?

Jenkins uses this xstream & the grace period is also over (expired 6 days ago) for the CVE's (CVE-2022-40152, CVE-2022-40151) When we can expect the fix ?

New plugin release with log4j v2.17.1

Hi, Any idea when this is going to get fixed ?