Root has patched CVE-2018-1313 in the io.root.org.apache.derby:derby package for Root:Maven. Multiple fixed versions available.
{ "source": "Root", "severity": "MEDIUM", "distro": "maven", "distro_version": "" }
"root.io.2"
"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2018-1313.json"
true
2.0
"10.14.2.0"
[ "10.14.2.0-root.io.1", "10.14.2.0-root.io.2" ]
""
1.0
"10.14.2.0-aikido.2"
[ "10.14.2.0-aikido.2" ]