[WAGON-612] Update jsoup to >= 1.14.2 for fix security issue

• Type: Dependency upgrade
• Status: Closed
• Priority: Minor
• Resolution: Won't Fix
• Affects Version/s: 3.4.3
• Component/s: wagon-http
• Assignee: Unassigned
• Reporter: Nikolay Krasko
• Created: 30/Aug/21 10:48
• Updated: 21/Feb/22 14:00
• Resolved: 26/Dec/21 17:54

Description

There's a vulnerability report for the jsoup <= 1.14.2 https://www.cvedetails.com/cve/CVE-2021-37714

jsoup:1.12.1 is used by wagon-http-shared:3.4.3, that triggers security bots alerts.

Please could you update the dependency and release a new version?

Issue Links

• is duplicated by: MNG-7256 Maven version 3.8.2 has jsoup vulnerability
• is superceded by: WAGON-618 Remove HTTP file listing with JSoup
• relates to: MNG-7414 Maven version 3.8.3 + 3.8.4 have jsoup vulnerability