This repository has been archived by the owner on Nov 17, 2023. It is now read-only.

There is a vulnerability in dropwizard 1.3.2,upgrade recommended #1037

Open

QiAnXinCodeSafe opened this issue Jan 19, 2021 · 1 comment

QiAnXinCodeSafe commented Jan 19, 2021

incubator-datalab/pom.xml

Line 72 in 423fa3a

<io.dropwizard.version>1.3.2</io.dropwizard.version>

CVE-2020-5245 CVE-2020-11002

Recommended upgrade version：1.3.21

pjfanning commented Apr 7, 2022

this is updated in master - https://github.com/apache/incubator-datalab/blob/master/services/billing-aws/pom.xml

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.