[ https://issues.apache.org/jira/browse/RANGER-3100?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Saket updated RANGER-3100: -------------------------- Description: Ranger is pulling in [httpclient 4.5.6|https://github.com/apache/ranger/blob/2f4277eb15f86b82718d05989de5545687c33539/pom.xml#L132]. Please upgrade to httpclient 4.5.13+. CVE-2020-13956: https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-1016906 was:Ranger is pulling in [httpclient 4.5.6|https://github.com/apache/ranger/blob/2f4277eb15f86b82718d05989de5545687c33539/pom.xml#L132]. Please upgrade to httpclient 4.5.13+. > Upgrade httpclient version from 4.5.6 to 4.5.13+ due to CVE-2020-13956 > ---------------------------------------------------------------------- > > Key: RANGER-3100 > URL: https://issues.apache.org/jira/browse/RANGER-3100 > Project: Ranger > Issue Type: Bug > Components: Ranger > Reporter: Saket > Priority: Major > > Ranger is pulling in [httpclient > 4.5.6|https://github.com/apache/ranger/blob/2f4277eb15f86b82718d05989de5545687c33539/pom.xml#L132]. > Please upgrade to httpclient 4.5.13+. > CVE-2020-13956: https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-1016906 -- This message was sent by Atlassian Jira (v8.3.4#803005)