Root has patched CVE-2018-1313 in the io.root.org.apache.derby:derby package for Root:Maven. Multiple fixed versions available.
{ "distro": "maven", "distro_version": "", "severity": "MEDIUM", "source": "Root" }
[ "10.14.2.0-root.io.1", "10.14.2.0-root.io.2" ]
"root.io.2"
true
"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2018-1313.json"
2
"10.14.2.0"
[ "10.14.2.0-aikido.2" ]
""
1
"10.14.2.0-aikido.2"