org.drools:drools-camel-server (5.3.5.final), org.jbpm:jbpm-distribution (5.2.5.final) +3 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (5.2.5.final)

org.jbpm:jbpm-bpmn2 MAVEN version 5.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jbpm:jbpm-bpmn2 and may be impacted: - org.drools:drools-camel-server 5.3.5.final - org.jbpm:jbpm-distribution 5.2.5.final - org.jbpm:jbpm-examples...

org.jbpm:jbpm-distribution (5.3.0.cr1), org.jbpm:jbpm-examples (5.3.0.cr1) +1 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (5.3.0.cr1)

org.jbpm:jbpm-bpmn2 MAVEN version 5.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jbpm:jbpm-bpmn2 and may be impacted: - org.jbpm:jbpm-distribution 5.3.0.cr1 - org.jbpm:jbpm-examples 5.3.0.cr1 - org.jbpm:jbpm-test 5.3.0.cr1 Source cves:...

com.github.albfernandez:jbpm (>=3.2.10-1-sp3_seam2_hibernate5, <=3.2.11.ayg), com.github.albfernandez:jbpm-enterprise (>=3.2.10-1-sp3_seam2_hibernate5, <=3.2.11.ayg) +6 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.6.2)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - com.github.albfernandez:jbpm =3.2.10-1-sp3seam2hibernate5,...