David Handermann created NIFI-13958:
---------------------------------------

             Summary: Upgrade elliptic to 6.6.0 for Registry
                 Key: NIFI-13958
                 URL: https://issues.apache.org/jira/browse/NIFI-13958
             Project: Apache NiFi
          Issue Type: Improvement
          Components: NiFi Registry
            Reporter: David Handermann


The [elliptic|https://github.com/indutny/elliptic] library is a transitive 
dependency of Webpack for NiFi Registry, used during development builds, and 
should be upgraded to 6.6.0 to mitigate CVE-2024-48948 related to signature 
verification. As this is a development build dependency, it does not impact any 
runtime behavior.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to