[
https://issues.apache.org/jira/browse/CASSANDRA-20924?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18022799#comment-18022799
]
Stefan Miklosovic edited comment on CASSANDRA-20924 at 9/25/25 1:43 PM:
------------------------------------------------------------------------
btw the only place we use cassandra-driver-core-3.12.1-shaded is in stress tool
so all these CVEs in there are in practice quite harmless. Until stress has its
own class path, the scanner will report that.
was (Author: smiklosovic):
btw the only place we use cassandra-driver-core-3.12.1-shaded is in stress tool
so all these CVEs in there are in practice quite harmless.
> Update dependency-check library to version 12.1.6
> -------------------------------------------------
>
> Key: CASSANDRA-20924
> URL: https://issues.apache.org/jira/browse/CASSANDRA-20924
> Project: Apache Cassandra
> Issue Type: Task
> Reporter: Stefan Miklosovic
> Assignee: Stefan Miklosovic
> Priority: Normal
>
> The current version (12.1.0) fail on unauthorized exceptions to OSS index
> which 12.1.6 skips.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
