You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "masood (Jira)" <ji...@apache.org> on 2023/05/11 06:35:00 UTC

[jira] [Updated] (KAFKA-14986) security vulnerability in jose4j-0.7.9.jar

     [ https://issues.apache.org/jira/browse/KAFKA-14986?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

masood updated KAFKA-14986:
---------------------------
    Priority: Critical  (was: Major)

> security vulnerability in jose4j-0.7.9.jar 
> -------------------------------------------
>
>                 Key: KAFKA-14986
>                 URL: https://issues.apache.org/jira/browse/KAFKA-14986
>             Project: Kafka
>          Issue Type: Bug
>    Affects Versions: 3.3.1
>            Reporter: masood
>            Priority: Critical
>              Labels: security-issue, vulnerabilities
>
> Kafka has a depenedency on the jose4j-0.7.9.jar 
> jose4j-0.7.9.jar  has been identified with the WS-2023-0116. 
> [https://www.mend.io/vulnerability-database/WS-2023-0116] 
> could you please confirm is Kafka impacted by this security vulnerability.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)