org.apache.syncope.fit:syncope-fit-build-tools (>=2.0.9, <=2.1.0), org.jooby:jooby-apitool (>=1.5.0, <=1.6.9) +1 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.17.1)

org.webjars:swagger-ui MAVEN version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - org.apache.syncope.fit:syncope-fit-build-tools =2.0.9, =1.5.0, =1.5.0, =1.6.9 Source cves: CVE-2018-25031 Source...