org.jooby:jooby-apitool (>=1.2.0, <=1.2.3), org.jooby:jooby-maven-plugin (>=1.2.0, <=1.2.3) +1 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.1.6)

org.webjars:swagger-ui MAVEN version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - org.jooby:jooby-apitool =1.2.0, =1.2.0, =1.2.0, =1.2.3 Source cves: CVE-2018-25031 Source advisory:...

org.apache.syncope.fit:syncope-fit-build-tools (>=2.0.9, <=2.1.0), org.jooby:jooby-apitool (>=1.5.0, <=1.6.9) +1 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.17.1)

org.webjars:swagger-ui MAVEN version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - org.apache.syncope.fit:syncope-fit-build-tools =2.0.9, =1.5.0, =1.5.0, =1.6.9 Source cves: CVE-2018-25031 Source...

com.jakehschwartz:finatra-swagger_2.12 (18.8.0), com.whisk:finatra-swagger_2.12 (18.9.1-whisk) +3 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.14.2)

org.webjars:swagger-ui MAVEN version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.jakehschwartz:finatra-swagger2.12 18.8.0 - com.whisk:finatra-swagger2.12 18.9.1-whisk - io.virtualan:idaiserve...