Maven assembly plugin 3.6.0 depends on com.github.luben:zstd-jni 1.5.5-2

vmware / build-tools-for-vmware-aria

Build Tools for VMware Aria provides development and release management tools for implementing automation solutions based on the VMware Aria Suite and VMware Cloud Director. The solution enables Virtual Infrastructure Administrators and Automation Developers to use standard DevOps practices for managing and deploying content.

Other

48 stars 24 forks source link

Description

Maven assembly plugin 3.6.0 depends on com.github.luben:zstd-jni 1.5.5-2, which is apparently insecure:

Maven assembly plugin 3.7.1 is available and should probably be used.

Component/s:

base-package repository

Affects Build/s:

2.40.0 and older

Environment

Client

Build Tools for VMware Aria Version: 2.40.0
Visual Studio Code Version: latest
OS Version: n/a

Server

vRealize Automation Version:
vRealize Orchestrator Version:
vRealize Operations Version:
vRealize Log Insight Version:

vmware / build-tools-for-vmware-aria