You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tinkerpop.apache.org by "Jim Foscue (Jira)" <ji...@apache.org> on 2023/03/09 20:34:00 UTC

[jira] [Closed] (TINKERPOP-2883) Vulnerability in Netty libraries

     [ https://issues.apache.org/jira/browse/TINKERPOP-2883?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jim Foscue closed TINKERPOP-2883.
---------------------------------
    Resolution: Not A Problem

> Vulnerability in Netty libraries
> --------------------------------
>
>                 Key: TINKERPOP-2883
>                 URL: https://issues.apache.org/jira/browse/TINKERPOP-2883
>             Project: TinkerPop
>          Issue Type: Improvement
>    Affects Versions: 3.6.2
>            Reporter: Jim Foscue
>            Priority: Major
>              Labels: Ironbank
>
> Vulnerability in netty-3.9.9
> Need to update to netty libraries to greater than 4.1.44
> https://nvd.nist.gov/vuln/detail/CVE-2019-20445
> HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)