Hi rzo - Thank you for patching for v13.x. I unzipped release v13.16 but these two libs are not patched still: inflating: yajsw-stable-13.16/lib/core/commons/commons-lang-2.6.jar inflating: yajsw-stable-13.16/lib/core/commons/commons-lang3-3.12.0.jar Thank you agian.
YAJSW v13.x: commons-lang3 & commons-lang vulnerability
netty* v4.1.118 is included with yajsw v13.15. Thank you, rzo!
The fix v2.10.0 is included in yajsw v13.15. Thank you, rzo.
commons-vfs2-2.9.0.jar Vulnerabilities
jre8 contines to live (being patched with jre11 and up). Please consider yajsw v13.14 with the netty* updated. Thank you.
netty-common-4.1.114.Final vulnerability
commons-io-2.11.0 vulnerability