Re: [faces-dev] A vulnerability report requires your attention

[Wayne Beaton <wayne.beaton@xxxxxxxxxxxxxxxxxxxxxx>]

FYI, I took a harder look at the report and determined that the vulnerability is actually with the implementation in Eclipse Mojarra. I'll contact the project team shortly.

FWIW, issues marked as "confidential" in Bugzilla are accessible by anybody who holds committer status on any Eclipse project.

Wayne

On Mon, Sep 27, 2021 at 5:17 PM Wayne Beaton <wayne.beaton@xxxxxxxxxxxxxxxxxxxxxx> wrote:

Greetings Jakarta Faces project team.

An issue has been opened regarding a potential vulnerability in Jakarta Faces.

I won't post the details here. Can a project committer please review this issue? The issue has been marked confidential so this link will only be accessible to committers.

Our policies and practices regarding how we manage vulnerability reports are captured in the handbook.

Wayne
--

Wayne Beaton

Director of Open Source Projects | Eclipse Foundation

--

Wayne Beaton

Director of Open Source Projects | Eclipse Foundation