[ 
https://issues.apache.org/jira/browse/CASSANDRA-18148?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17676508#comment-17676508
 ] 

Norman Maurer commented on CASSANDRA-18148:
-------------------------------------------

Your assumption is correct... Cassandra is not affected as it not use the 
decoder in question 

> netty-all vulnerability: CVE-2022-41881
> ---------------------------------------
>
>                 Key: CASSANDRA-18148
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-18148
>             Project: Cassandra
>          Issue Type: Bug
>          Components: Dependencies
>            Reporter: Brandon Williams
>            Priority: Normal
>             Fix For: 3.0.x, 3.11.x, 4.0.x, 4.1.x, 4.x
>
>
> This is showing in the OWASP scan.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org

Reply via email to