webswing
Chainguard
7.5
CVSS V3
Status
Impact
The Webswing project is distributed as precompiled JARs and WAR files, which bundle specific versions of third-party dependencies. These dependency versions are determined and embedded upstream by Webswing maintainers. In the current release (23.2.3), several dependencies include vulnerabilities that cannot be mitigated or upgraded directly by downstream users due to the nature of the precompiled artifacts.
Status