org.apache.isis.core:isis-core vulnerabilities (Maven)

2 vulnerabilities.

• org.apache.isis.core:isis-core Maven h2 webconsole (available only in prototype mode) should nevertheless be disabled by default. CVE-2022-42467 Fix available 5.3 MediumOctober 19, 2022
• org.apache.isis.core:isis-core Maven XSS vulnerability, eg for String properties. CVE-2022-42466 Fix available 6.1 MediumOctober 19, 2022