3.0.4

DATE	CVE	VULNERABILITY TITLE	RISK
2022-12-02	CVE-2022-46366	Deserialization of Untrusted Data vulnerability in Apache Tapestry Apache Tapestry 3.x allows deserialization of untrusted data, leading to remote code execution. network low complexity apache CWE-502 critical	9.8
2022-07-13	CVE-2022-31781	Unspecified vulnerability in Apache Tapestry Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles Content Types. network low complexity apache	7.5