summary refs log tree commit diff
path: root/pkgs/servers/http/jboss/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'pkgs/servers/http/jboss/default.nix')
-rw-r--r--pkgs/servers/http/jboss/default.nix3
1 files changed, 3 insertions, 0 deletions
diff --git a/pkgs/servers/http/jboss/default.nix b/pkgs/servers/http/jboss/default.nix
index 2dd9d544a03b3..068053d71f09b 100644
--- a/pkgs/servers/http/jboss/default.nix
+++ b/pkgs/servers/http/jboss/default.nix
@@ -22,5 +22,8 @@ stdenv.mkDerivation {
     license = licenses.lgpl21;
     maintainers = [ maintainers.sander ];
     platforms = platforms.unix;
+    knownVulnerabilities = [
+      "CVE-2015-7501: remote code execution in apache-commons-collections: InvokerTransformer during deserialisation"
+    ];
   };
 }