<dependency> <groupId>org.apache.axis2</groupId> <artifactId>axis2-kernel</artifactId> <version>1.7.9</version> </dependency>
Axis2 1.7.9 still contains class files with @version $Rev: 123456 $ placeholders from 2006 — the build process never replaced them. This makes version verification via class inspection impossible. axis2 1.7 9 jar download
All official releases are at (not the main mirror system): <dependency> <groupId>org
The most interesting fact: (CVE-2018-8032) just two months later, leading to the emergency 1.7.9-hotfix1 release on June 24, 2018. If you download plain 1.7.9, you're getting a version with a known security flaw. 2018. If you download plain 1.7.9