Dependency on vulnerable library, http-client 3.1, CVE-2015-5262...

Brought to you by: andyc2, mguillem

#163 Dependency on vulnerable library, http-client 3.1, CVE-2015-5262 CVE-2014-3577 CVE-2012-6153

Milestone: 1.9.15

Status: closed-invalid

Owner: Marc Guillemot

Labels: None

Priority: 5

Updated: 2016-05-23

Created: 2016-05-21

Private: No

The initial ticket was raised on the OWASP ESAPI project. The dependent library is subject to three CVEs,

CVE-2015-5262
CVE-2014-3577
CVE-2012-6153

Httpclient 3.1 is EOL anyway.

Marc Guillemot - 2016-05-23

NekoHTML has no dependency on HttpClient

If you would like to refer to this comment somewhere else in this project, copy and paste the following link: