Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Currently we have no known Java vulnerabilities in OFBiz code. There are some vulnerable third parties libraries. Fortunately it's not high vulnerabilities. You can know more looking at the last report file. We use the OWASP Dependency Check to check third parties libraries . This tools checks vulnerabilities in the third parties Java librairires OFBiz uses.This page explains how to use it and to share results: About OWASP Dependency Check

...