You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@linkis.apache.org by GitBox <gi...@apache.org> on 2022/01/28 11:23:01 UTC

[GitHub] [incubator-linkis] pjfanning opened a new issue #1349: [Bug] linkis uses a version of jetty that has reported security vulnerabilities

pjfanning opened a new issue #1349:
URL: https://github.com/apache/incubator-linkis/issues/1349


   ### Search before asking
   
   - [X] I searched the [issues](https://github.com/apache/incubator-linkis/issues) and found no similar issues.
   
   
   ### Linkis Component
   
   linkis-commons
   
   ### What happened + What you expected to happen
   
   https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-server shows which versions have issues
   
   If you don't want to use latest jetty release (v11.x.x), you could use the latest v9.x.x release (also CVE free)
   
   ### Relevent platform
   
   all
   
   ### Reproduction script
   
   n/a
   
   ### Anything else
   
   _No response_
   
   ### Are you willing to submit a PR?
   
   - [ ] Yes I am willing to submit a PR!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@linkis.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@linkis.apache.org
For additional commands, e-mail: commits-help@linkis.apache.org

[GitHub] [incubator-linkis] peacewong commented on issue #1349: [Bug] linkis uses a version of jetty that has reported security vulnerabilities

Posted by GitBox <gi...@apache.org>.
peacewong commented on issue #1349:
URL: https://github.com/apache/incubator-linkis/issues/1349#issuecomment-1024150266


   Thank you, there are Vulnerabilities in the lower version of jetty, it is necessary to upgrade


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@linkis.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@linkis.apache.org
For additional commands, e-mail: commits-help@linkis.apache.org