Vulnerabilities in Archi

[connor.dawson]

Hi,

We scanned the archi repository with Mend SCA and found that there are vulnerabilities with the following libraries:

• jackson-databind-2.9.jar
• jdom2-2.0.6.jar
• bootstrap-3.3.2.min.js
• commons-io-2.6.jar
• commons-beanutils-1.9.3.jar

Are there plans to update these libraries to fixed versions? Do these libraries pose security risks for Archi users if they are not fixed?

Thank you

[Phil Beauvoir]

Hi, please report the issue here so we can take a look at it:

https://github.com/archimatetool/archi/issues