Re: [community-outreach] Codemirror CVE

[Shubham Bachute <sbachute@xxxxxxxxx>]

Hi,

We are using the following two jars in one of our projects.

1. codemirror.eclipse.resources_1.0.0.201605241158

2. codemirror.eclipse.swt_1.0.0.201605241158

Whitesource scan shows that these two jars have high priority CVEs and an alternative is not available on eclipse site.

https://download.eclipse.org/oomph/archive/reports/download.eclipse.org/releases/2022-03/202203161000/index.html 

Can you please suggest an alternative or provide the URL where we can locate these jars?

Regards,

Shubham Bachute

On Mon, Jan 16, 2023 at 11:59 AM Shubham Bachute <sbachute@xxxxxxxxx> wrote:

---------- Forwarded message ---------
From: <community-outreach-owner@xxxxxxxxxxx>
Date: Mon, Jan 16, 2023 at 11:59 AM
Subject: Codemirror CVE
To: <sbachute@xxxxxxxxx>

Your message has been rejected, probably because you are not
subscribed to the mailing list and the list's policy is to prohibit
non-members from posting to it.  If you think that your messages are
being rejected in error, contact the mailing list owner at
community-outreach-owner@xxxxxxxxxxx.




---------- Forwarded message ----------
From: Shubham Bachute <sbachute@xxxxxxxxx>
To: community-outreach@xxxxxxxxxxx
Cc: 
Bcc: 
Date: Mon, 16 Jan 2023 11:59:07 +0530
Subject: Codemirror CVE

Hi,

We are using the following two jars in one of our projects.

1. codemirror.eclipse.resources_1.0.0.201605241158

2. codemirror.eclipse.swt_1.0.0.201605241158

Whitesource scan shows that these two jars have high priority CVEs and an alternative is not available on eclipse site.

https://download.eclipse.org/oomph/archive/reports/download.eclipse.org/releases/2022-03/202203161000/index.html 

Can you please suggest an alternative or provide the URL where we can locate these jars?

Regards,

Shubham Bachute