eclipse-rdf4jGH-5073: added note on CVEs (eclipse-rdf4j#5074)

Fedict · Jul 10, 2024 · 33be23c · 33be23c
2 parents 845744b + 809bf89
commit 33be23c
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/site/content/release-notes/5.0.1.md b/site/content/release-notes/5.0.1.md
@@ -13,6 +13,11 @@ The following dependencies and/or transitive dependencies have been updated to a
  - Upgraded snappy-java to 1.1.10.5
  - Upgraded netty to 4.1.111
 
+These upgrades fix several issues reported in various CVEs (more details can be found in the RDF4J github [issue list](https://github.com/eclipse-rdf4j/rdf4j/issues?q=is%3Aissue+label%3Asecurity+is%3Aclosed) ).
+While these vulnerabilities may or may not affect the security of RDF4J itself in a real-world environment, 
+users are nevertheless recommended to consider upgrading to the latest version of RDF4J.
+
+
 ### Acknowledgements
 
 This release was made possible by contributions from Florian Kleedorfer, Håvard M. Ottestad, Matthew Nguyen, Bart Hanssens,