[jira] [Commented] (NIFI-10779) Apache Nifi latest version is packaged with Vulnerable version of Apache Texts

["GANESH NAGARAJAN (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NIFI-10779?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17630526#comment-17630526 ] 

GANESH  NAGARAJAN commented on NIFI-10779:
------------------------------------------

Thanks for the quick reply [~joewitt] . When is the stable version of 1.19.0 expected to be released?

> Apache Nifi latest version is packaged with Vulnerable version of Apache Texts
> ------------------------------------------------------------------------------
>
>                 Key: NIFI-10779
>                 URL: https://issues.apache.org/jira/browse/NIFI-10779
>             Project: Apache NiFi
>          Issue Type: Bug
>    Affects Versions: 1.18.0
>            Reporter: GANESH  NAGARAJAN
>            Priority: Major
>
> [Release Notes - ASF JIRA (apache.org)|https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316020&version=12352150]
> Version 1.18 - Didn't mention any issues resolved towards apache texts vulnerability
> [Apache Commons Text Remote Code Execution Vulnerability (zscaler.com)|https://www.zscaler.com/blogs/security-research/security-advisory-apache-commons-text-remote-code-execution-vulnerability]
>  
> When do we expect this vulnerability to be resolved and when the next version would be available for us to use and have clean softwares 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)