cdi-api dependency has a known vulnerability CVE-2014-8122 #290
Description
Expected Behavior
usage of library that is has no vulnerability
Actual Behavior
current code has a dependency:
javax.enterprise
cdi-api
1.2
compile
which has MEDIUM (4.3) known vulnerability. see https://nvd.nist.gov/vuln/detail/CVE-2014-8122