Re: CVE-2019-10071: Apache Tapestry vulnerability disclosure

2019-10-14 Thread Thiago H. de Paula Figueiredo
On Mon, Oct 7, 2019 at 11:39 AM Nourredine K. wrote: > Hello Thiago, > Hello! > Same question here. > > Does this CVE concern only Tapestry 5.4 ? What about 5.3 ? > Versions affected: all Apache Tapestry versions between 5.4.0, including its betas, and 5.4.3. -- Thiago

Re: [CVE-2019-0195] Apache Tapestry vulnerability disclosure

2019-10-14 Thread Thiago H. de Paula Figueiredo
On Mon, Oct 7, 2019 at 11:35 AM Nourredine K. wrote: > Hello Thiago, > Hello! > Does this CVE concerns only Tapestry 5.4 ? What about 5.1, 5.2 and 5.3 ? > Versions affected: all Apache Tapestry versions between 5.4.0, including its betas, and 5.4.3 > I think we should create a dedicated jir