You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "Mike R (Jira)" <ji...@apache.org> on 2022/05/26 18:11:00 UTC

[jira] [Updated] (NIFI-10060) Fix Issues Found In Dependency Checker

     [ https://issues.apache.org/jira/browse/NIFI-10060?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mike R updated NIFI-10060:
--------------------------
    Description: 
Dependencychecker by OWASP shows the following dependencies that have CVEs against them and are showing as vulnerable when I implement NiFi in my environment when it gets scanned. Are there any plans to upgrade any of the following:

protobuf-java-3.19.1.jar
nifi-xml-processing-1.16.2.jar
google-http-client-gson-1.140.1.jar

  was:
Dependencychecker by OWASP shows the following dependencies that have CVEs against them and are showing as vulnerable when I implement NiFi in my environment when it gets scanned. Are there any plans to upgrade any of the following:

spring-core-5.3.19.jar
spring-aop-5.3.19.jar
protobuf-java-3.19.1.jar
nifi-xml-processing-1.16.2.jar
google-http-client-gson-1.140.1.jar


> Fix Issues Found In Dependency Checker
> --------------------------------------
>
>                 Key: NIFI-10060
>                 URL: https://issues.apache.org/jira/browse/NIFI-10060
>             Project: Apache NiFi
>          Issue Type: Bug
>    Affects Versions: 1.16.1, 1.16.2
>            Reporter: Mike R
>            Priority: Major
>
> Dependencychecker by OWASP shows the following dependencies that have CVEs against them and are showing as vulnerable when I implement NiFi in my environment when it gets scanned. Are there any plans to upgrade any of the following:
> protobuf-java-3.19.1.jar
> nifi-xml-processing-1.16.2.jar
> google-http-client-gson-1.140.1.jar



--
This message was sent by Atlassian Jira
(v8.20.7#820007)