Uploaded image for project: 'JOC - JS7 Operations Center'
  1. JOC - JS7 Operations Center
  2. JOC-2268

org.eclipse.parsson version 1.1.7 flagged with 3rd Party Vulnerability issue CVE-2026-9563

    XMLWordPrintable

Details

    • Fix
    • Status: Released (View Workflow)
    • Minor
    • Resolution: Fixed
    • 2.7.8, 2.8.4
    • 2.9.0, 2.7.9, 2.8.5
    • None
    • None
    • CVE-2023-7272

    Description

      Current Situation

      • JS7 JOC Cockpit and Agent ship with the 3rd party library jersey-media-moxy version 3.1.6 from glassfish. Thislibrary hasa transitive 3rd party library of org.eclipse.parsson 1.1.7 that is affected by a vulnerability CVE-2026-9563.
      • Our software ships with javax.json instead, that is flagged with the false positive, see JOC-2019.

      Desired Behavior

      • JS7 JOC Cockpit and Agent should ship without the flagged parsson library.

      Attachments

        Issue Links

          is related to

          Fix - JOC-2019 glassfish javax.json version 1.1.4 flagged with 3rd Party Vulnerability issue CVE-2023-7272

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Dismissed

          Activity

            People

              sp Santiago Aucejo Petzoldt
              sp Santiago Aucejo Petzoldt
              Ritesh Telkar Ritesh Telkar
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: