[ https://issues.apache.org/jira/browse/FLINK-8308?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16357299#comment-16357299 ]
Tzu-Li (Gordon) Tai commented on FLINK-8308: -------------------------------------------- [~uce] what is the status of this? Has this been merged for 1.4.1 yet? > Update yajl-ruby dependency to 1.3.1 or higher > ---------------------------------------------- > > Key: FLINK-8308 > URL: https://issues.apache.org/jira/browse/FLINK-8308 > Project: Flink > Issue Type: Task > Components: Project Website > Reporter: Fabian Hueske > Assignee: Steven Langbroek > Priority: Critical > Fix For: 1.5.0, 1.4.1 > > > We got notified that yajl-ruby < 1.3.1, a dependency which is used to build > the Flink website, has a security vulnerability of high severity. > We should update yajl-ruby to 1.3.1 or higher. > Since the website is built offline and served as static HTML, I don't think > this is a super critical issue (please correct me if I'm wrong), but we > should resolve this soon. -- This message was sent by Atlassian JIRA (v7.6.3#76005)