[
https://issues.apache.org/jira/browse/TINKERPOP-3053?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Cole Greer closed TINKERPOP-3053.
---------------------------------
Fix Version/s: 3.6.8
3.7.3
Assignee: Cole Greer
Resolution: Fixed
Resolved by CTR:
https://github.com/apache/tinkerpop/commit/9c394637e8d4ac865a56711635db2e94e92301be
> security vulnerability in netty-codec-http2
> -------------------------------------------
>
> Key: TINKERPOP-3053
> URL: https://issues.apache.org/jira/browse/TINKERPOP-3053
> Project: TinkerPop
> Issue Type: Bug
> Components: console
> Affects Versions: 3.6.6
> Reporter: Tal Ron
> Assignee: Cole Greer
> Priority: Blocker
> Fix For: 3.6.8, 3.7.3
>
>
> version used is: netty-codec-http2-4.1.96.Final - GHSA-xpw8-rcwv-8f8p (dep:
> [CVE-2023-4586|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4586])
> [https://github.com/advisories/GHSA-xpw8-rcwv-8f8p]
> [https://mvnrepository.com/artifact/io.netty/netty-codec-http2]
> affected versions: < 4.1.100.Final
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)