we are using verapdf-validation for some of our units tests. Our dependency scanner marks core and core-jakarta in version 1.24.1 as vulnerable dependencies due to CVE-2024-28109.
In the description of the vulnerability it says that version 1.24.2 has been patched. I can see the release in your github repository, but I dont find the released libraries in maven central. Am I missing something?
Hi,
we are using verapdf-validation for some of our units tests. Our dependency scanner marks core and core-jakarta in version 1.24.1 as vulnerable dependencies due to CVE-2024-28109.
In the description of the vulnerability it says that version 1.24.2 has been patched. I can see the release in your github repository, but I dont find the released libraries in maven central. Am I missing something?
Regards, Martin