Apache Cayenne vulnerabilities

• apache cayenne Deserialization of untrusted data in the Hessian Component of Apache Cayenne 4.1 with older Java versions CVE-2022-24289 Fix available 8.8 HighFebruary 11, 2022
• apache cayenne XML External Entity Reference in Apache Cayenne CVE-2018-11758 Fix available 8.1 HighAugust 22, 2018