Velocity jar in smartclient SmartClient_v121p_2024-10-20_Enterprise

[b2bidev]

thank you

[Isomorphic]

Velocity's vulnerabilities have never created vulnerabilities in SmartClient. The latest versions already use a patched version of Velocity that doesn't have those vulnerabilities.

[b2bidev]

Hi,

We are using SmartClient_v121p_2024-10-20_Enterprise. It uses velocity 1.7 jar which has lot of security vulnerabilities. Is smartclient affected by these vulnerabilities? If yes, are you planning to upgrade to velocity engine core 2.4.1 version where all these vulnerabilities are addressed?
If not what is the solution? can we change the velocity 1.7 dependency to velocity engine core 2.4.1, will smartclient work?
Thanks,