|  
                              
                               
                              | It claims that those vulnerabilities have nothing to do with XWiki and that it " and  can't be fixed by upgrading XWiki" which is not true since most of the reported vulnerabilities are from JARs located in the XWiki WAR. 
 !Firefox_Screenshot_2023-09-28T07-30-40.537Z.png!
 
 Notice ivy and commons-compress versions which are actually XWiki 15.7 versions (in XWiki 15.8 we have respectively ivy 2.5.2 and commons-compress 1.24.0).
 |  |