org.apache.httpcomponents:httpclient is out dateded
envgap__RipMeApp__ripme-1010
01 / FAILURE SIGNATURE
As reported upstream
No identifying execution failure has been captured.
Not a benchmark task.
- In a clean container the reported failure did not reproduce, or the known fix did not make the project run.
02 / ENVIRONMENT RECIPE
- Base commit
ed083da4a769ac3b0c5bfc74b340282e7ac5849b- Manifest
pom.xml- Reproduce
Awaiting issue-specific recipe- Run under trace
Awaiting a meaningful runtime command
03 / ORIGINAL ISSUE TEXT
RipMeApp/ripme #1010 · read the original issue
Ripme uses org.apache.httpcomponents 4.3.3 for versions at or below 1.7.68 which is vulnerable to CVE-2015-5262, the decencies should be changed to at least 4.3.6
04 / LABELS
Labels from the report text only; not yet run
No supported category has been assigned.
Label rules and the text that matched
[]