-
Task
-
Resolution: Done
-
Major
-
None
-
None
WildFly no longer uses JSoup in production code, but some cleanups are needed.
1) Remove the optional dep on the non-existent org.jsoup module from the org.hibernate.validator module.
2) Make the org.jsoup:jsoup entry in dependencyManagement 'test' scope.
3) Upgrade the version to the most recent one that works and has https://nvd.nist.gov/vuln/detail/CVE-2022-36033 fixed, so we don't get flagged up. (WFLY-16943 handles this part.)
- relates to
-
WFLY-16943 Update JSoup to 1.15.3 (fixes CVE-2022-36033)
- Closed