[
https://issues.apache.org/jira/browse/TINKERPOP-2983?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Cole Greer closed TINKERPOP-2983.
---------------------------------
Resolution: Fixed
> Upgrade Netty for Security Reasons
> ----------------------------------
>
> Key: TINKERPOP-2983
> URL: https://issues.apache.org/jira/browse/TINKERPOP-2983
> Project: TinkerPop
> Issue Type: Bug
> Components: driver, server
> Affects Versions: 3.7.0
> Reporter: Luca Garulli
> Priority: Major
> Labels: security
> Fix For: 3.5.8, 3.6.6, 3.7.1
>
>
> Gremlin 3.7.0 (and previous) depends on Netty 4.1.86 that has a severe
> security issue reported on [https://nvd.nist.gov/vuln/detail/CVE-2023-34462.]
>
> The latest Netty version right now if 4.1.96.Final.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
