[GitHub] [hive] akshat0395 commented on pull request #4142: HIVE-27166 : Introduce Apache Commons DBUtils to handle boilerplate code

["akshat0395 (via GitHub)" <gi...@apache.org>]

akshat0395 commented on PR #4142:
URL: https://github.com/apache/hive/pull/4142#issuecomment-1480628205

   @rkirtir Commons DBUtils version 1.7 has a test dependency on an older version of Junit(4.11) which has a CVE.
   https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250. 
   We should wait for them to fix/upgrade the dependency, of else we will be introducing this CVE in Hive.
   
   Ref:
   https://mvnrepository.com/artifact/commons-dbutils/commons-dbutils/1.7


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: gitbox-unsubscribe@hive.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@hive.apache.org
For additional commands, e-mail: gitbox-help@hive.apache.org