CVE-2018-17201

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

br.net.woodstock.rockframework:rockframework-core (>=1.2.1, <=1.2.4), com.day.cq.dam:cq-dam-commons (>=5.4.0, <=5.5.0) +84 more potentially affected by CVE-2018-17201 via org.apache.sanselan:sanselan (0.97-incubator)

org.apache.sanselan:sanselan MAVEN version 0.97-incubator is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sanselan:sanselan and may be impacted: - br.net.woodstock.rockframework:rockframework-core =1.2.1, =5.4.0, =0.3.11, =2.0.0-alpha, =0.4....

br.net.woodstock.rockframework:rockframework-core (>=1.2.1, <=1.2.4), com.day.cq.dam:cq-dam-commons (>=5.4.0, <=5.5.0) +84 more potentially affected by CVE-2018-17201 via org.apache.sanselan:sanselan (0.97-incubator)

org.apache.sanselan:sanselan MAVEN version 0.97-incubator is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sanselan:sanselan and may be impacted: - br.net.woodstock.rockframework:rockframework-core =1.2.1, =5.4.0, =0.3.11, =2.0.0-alpha, =0.4....