Apache Isis vulnerabilities

• apache isis h2 webconsole (available only in prototype mode) should nevertheless be disabled by default. CVE-2022-42467 Fix available 5.3 MediumOctober 19, 2022
• apache isis XSS vulnerability, eg for String properties. CVE-2022-42466 Fix available 6.1 MediumOctober 19, 2022