Uploaded image for project: 'JS - JS7 JobScheduler Engine'
  1. JS - JS7 JobScheduler Engine
  2. JS-2262

Upgrade reactor-core to version 3.8.7 due to 3rd party vunerability issues CVE-2026-47857 and CVE-2026-47863

    XMLWordPrintable

Details

    • Fix
    • Status: Released (View Workflow)
    • Minor
    • Resolution: Fixed
    • 2.8.4, 2.9.0
    • 2.8.5, 2.9.1
    • None
    • None
    • CVE-2026-47857, CVE-2026-47863

    Description

      Current Situation

      Currently JS7 ships with reactor-core 3.7.11 that is affected by two vulnerabilities.

      Impact

      The referenced condition described in the CVEs is not in use in our codebase, therefore we rate the impact to our software as low.

      Desired Behavior

      JS7 should use reactor-core 3.8.7 that fixes the vulnerability issues.

      Attachments

        Activity

          People

            jz Joacim Zschimmer
            sp Santiago Aucejo Petzoldt
            Aakash Rao Aakash Rao
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: