While examining application code with Aquascan it was found that kie-server-spring-boot-starter is exposed to following vulnerabilities:
The reason is that starter's transitive dependency org.kie.server:kie-server-rest-jbpm-ui is dependent on outdated version of JQuery. Solution would be to bump JQuery to 3.5.0 inside started code.
Used version: 7.72.0.Final
Could someone suggest some workaround? Where should be expect the fix in started?