Hello!

Thank you in advance for your time and attention to my questions. 

1. Is it true that the latest release of OpenCMIS Server is version 1.1? 
2. Is it acceptable to say OpenCMIS 1.1 is dependent on Apache CXF 3.1.2 which 
is vulnerable to CVE-2019-12419?  
3. Is there a newer release of OpenCMIS Server on the horizon with updated 
dependencies? 

Thank You!
Dave

Reply via email to