<p>Good day. Recently, I've notice that the following JAR APIs embedded into the BIRT framework have security vulnerabilities and exposures opened against them.<br><br>
Do you have any plan to address these security issues? Thanks a lot in advance.<br>
</p>
<div><strong>axis.jar</strong></div>
<div>CVE-2012-5784</div>
<div>CVE-2014-3596</div>
<div> </div>
<div><strong>derby.jar</strong></div>
<div>CVE-2009-4269</div>
<div>CVE-2015-1832</div>
<div> </div>
<div><strong>org.apache.batik.css_1.6.0.v201011041432.jar</strong></div>
<div>CVE-2015-0250</div>
<div> </div>
<div><strong>org.apache.batik.pdf_1.6.0.v201105071520.jar</strong></div>
<div>CVE-2015-0250</div>
<div> </div>
<div><strong>org.apache.poi_3.9.0.v201303080712.jar</strong></div>
<div>CVE-2014-3529</div>
<div>CVE-2014-3574</div>
<div>CVE-2014-9527</div>
<div>CVE-2016-5000</div>
<div>CVE-2017-5644</div>
<div> </div>
<div><strong>org.eclipse.birt.report.data.oda.excel_4.4.1.v201408290142.jar: poi-ooxml-3.9-20121203.jar </strong></div>
<div>CVE-2014-3529</div>
<div>CVE-2014-3574</div>
<div>CVE-2014-9527</div>
<div>CVE-2016-5000</div>
<div>CVE-2017-5644</div>
<div> </div>
<div><strong>poi-ooxml-3.9-20121203.jar </strong></div>
<div>CVE-2014-3529</div>
<div>CVE-2014-3574</div>
<div>CVE-2014-9527</div>
<div>CVE-2016-5000</div>
<div>CVE-2017-5644</div>
<p><br>
</p>
