akshat0395 commented on PR #4142: URL: https://github.com/apache/hive/pull/4142#issuecomment-1480628205
@rkirtir Commons DBUtils version 1.7 has a test dependency on an older version of Junit(4.11) which has a CVE. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250. We should wait for them to fix/upgrade the dependency, of else we will be introducing this CVE in Hive. Ref: https://mvnrepository.com/artifact/commons-dbutils/commons-dbutils/1.7 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
