[
https://issues.apache.org/jira/browse/TINKERPOP-2826?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17631281#comment-17631281
]
ASF GitHub Bot commented on TINKERPOP-2826:
-------------------------------------------
acoady commented on PR #1862:
URL: https://github.com/apache/tinkerpop/pull/1862#issuecomment-1309350478
We need an update to spark-core which also uses IVY 2.5.0 which is not
available yet
> Critical security vulnerability in ivy
> --------------------------------------
>
> Key: TINKERPOP-2826
> URL: https://issues.apache.org/jira/browse/TINKERPOP-2826
> Project: TinkerPop
> Issue Type: Bug
> Components: server
> Affects Versions: 3.6.1, 3.5.4
> Reporter: Aaron Coady
> Priority: Major
>
> Critical security vulnerability found in IVY 2.5.0
> [https://nvd.nist.gov/vuln/detail/CVE-2022-37865]
>
> This is resolved in IVY 2.5.1
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
