[
https://issues.apache.org/jira/browse/TINKERPOP-2746?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Stephen Mallette closed TINKERPOP-2746.
---------------------------------------
Fix Version/s: 3.7.0
3.6.1
Assignee: Stephen Mallette
Resolution: Done
For some reason the GH integration didn't kick in - this was fixed here:
https://github.com/apache/tinkerpop/pull/1674
> Medium security vulnerabilities on logback-core
> ------------------------------------------------
>
> Key: TINKERPOP-2746
> URL: https://issues.apache.org/jira/browse/TINKERPOP-2746
> Project: TinkerPop
> Issue Type: Bug
> Components: console, server
> Affects Versions: 3.6.0
> Reporter: Aaron Coady
> Assignee: Stephen Mallette
> Priority: Major
> Fix For: 3.7.0, 3.6.1
>
>
> h2. Medium severity security issues have been logged against logback core.
> They are fixed in the latest version. Below are the details.
> h2. Deserialization of Untrusted Data in logback
> https://github.com/advisories/GHSA-668q-qrv7-99fm
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
