org.drools:drools-camel-server (5.3.5.final), org.jbpm:jbpm-distribution (5.2.5.final) +3 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (5.2.5.final)

org.jbpm:jbpm-bpmn2 MAVEN version 5.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jbpm:jbpm-bpmn2 and may be impacted: - org.drools:drools-camel-server 5.3.5.final - org.jbpm:jbpm-distribution 5.2.5.final - org.jbpm:jbpm-examples...