Apache Wicket 8.20.0, 9.25.0 and 10.12.0 fix 19 CVEs
Original title: Apache Wicket: 19 CVEs fixed in 8.20.0, 9.25.0 and 10.12.0
8.20.0 and 9.25.0 are end-of-life releases, so upgrade to Wicket 10 LTS or 11.
On 1 November the Apache Wicket PMC published 19 security advisories. All issues are fixed in Apache Wicket 8.20.0, 9.25.0 and 10.12.0 for the release lines each one affects. The 8.x and 9.x lines have reached end of life.
Unconfirmed: Specific CVE details not provided
- 8.20.0 and 9.25.0 are final releases of their lines
- Releases older than 8.x no longer supported
- Upgrade to Wicket 10 LTS or 11 recommended
Impact: 19 CVEs in web framework
- 1.Upgrade to Wicket 10 LTS or 11
From the original article
Posted by Emond Papegaaij on Nov 01 On 1 November the Apache Wicket PMC published 19 security advisories. All of the issues are fixed in Apache Wicket 8. 20.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.