Hello! Thank you in advance for your time and attention to my questions.
1. Is it true that the latest release of OpenCMIS Server is version 1.1? 2. Is it acceptable to say OpenCMIS 1.1 is dependent on Apache CXF 3.1.2 which is vulnerable to CVE-2019-12419? 3. Is there a newer release of OpenCMIS Server on the horizon with updated dependencies? Thank You! Dave