Threats affecting pkg:maven/org.apache.tomee/livereload-tomee

Apache TomEE's development-time LiveReload feature listens on all network interfaces without authentication and accepts websocket connections from any origin. This allows a network attacker or a web page visited by the developer to observe file changes and server version, and potentially access deployed applications through the additional port. The issue affects LiveReload enabled in the embedded Maven plugin. Upgrading to versions 10.3.0 or 11.0.0-M2 resolves the vulnerability.