[TOMEE-4103] Update woodstox-core to mitigate CVE-2022-40153

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 9.0.0-M8, 8.0.13
• Fix Version/s: 8.0.14, 9.0.0
• Component/s: TomEE Core Server
• Labels: CVE
• Assignee: Unassigned
• Reporter: RAJU THANNEERU
• Created: 26/Oct/22 06:19
• Updated: 06/Dec/22 10:17
• Resolved: 06/Dec/22 10:16

Description

Update woodstox-core to mitigate CVE-2022-40153

https://nvd.nist.gov/vuln/detail/CVE-2022-40153

Issue Links

• is duplicated by: TOMEE-4110 Woodstox 6.4.0 (CVE-2022-40152)