-
Task
-
Resolution: Done
-
Neutral
-
None
-
BOM 6.3.0
-
None
-
-
Empty show more show less
-
Empty show more show less
-
Yes
neko-htmlunit-3.9.0.jar (pkg:maven/org.htmlunit/neko-htmlunit@3.9.0, cpe:2.3:a:htmlunit:htmlunit:3.9.0:*:*:*:*:*:*:*) : CVE-2024-23635
https://nvd.nist.gov/vuln/detail/CVE-2024-23635
The library actually affected is antisamy, an HTML parsing library, which Magnolia doesn't use. Neko-htmlunit 3.9.0 doesn't result to be affected by any vulnerability at the moment of writing.
Acceptance criteria