Uploaded image for project: 'Xray for Jira'
  1. Xray for Jira
  2. XRAY-8700

Replace Apache abdera dependency

    XporterXMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Critical
    • Resolution: Fixed
    • None
    • 6.2.7
    • Document Generator
    • None
    • Xray 2022 S14
    • UNCOVERED

    Description

      This library is used by document-generator to parse jira activity feeds. This activity feed info is an XML file which follows the https://activitystrea.ms/ format.

      Apache Abdera last update was done in 2012 and is retired as per the Apache doc: https://abdera.apache.org/

      Plus it pulls a transitive dependency (wstx-asl:3.2.6) which has been reported to have vulnerabilities.

      Attachments

        Activity

          People

            pamp Paulo Pereira
            dmdu David Duarte
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: