org.jbpm:jbpm-distribution (5.3.0.cr1), org.jbpm:jbpm-examples (5.3.0.cr1) +1 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (5.3.0.cr1)

org.jbpm:jbpm-bpmn2 MAVEN version 5.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jbpm:jbpm-bpmn2 and may be impacted: - org.jbpm:jbpm-distribution 5.3.0.cr1 - org.jbpm:jbpm-examples 5.3.0.cr1 - org.jbpm:jbpm-test 5.3.0.cr1 Source cves:...