CVE-2020-13936 Sandbox Bypass in Apache Velocity Engine

vharseko · Jun 24, 2024 · 87773e8 · 87773e8
1 parent 9d1ebc7
commit 87773e8
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/OpenICF-maven-plugin/pom.xml b/OpenICF-maven-plugin/pom.xml
@@ -179,8 +179,8 @@
         <!-- other -->
         <dependency>
             <groupId>org.apache.velocity</groupId>
-            <artifactId>velocity</artifactId>
-            <version>1.7</version>
+            <artifactId>velocity-engine-core</artifactId>
+            <version>2.3</version>
         </dependency>
 
         <dependency>