[jira] [Commented] (THRIFT-5512) CVEs notified on Maven Central (through deps)

2022-02-08 Thread Christopher Tubbs (Jira)
[ https://issues.apache.org/jira/browse/THRIFT-5512?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17489187#comment-17489187 ] Christopher Tubbs commented on THRIFT-5512: --- It is credible. JUnit 4 had the Maven coordinates

[jira] [Commented] (THRIFT-5512) CVEs notified on Maven Central (through deps)

2022-02-08 Thread Yuxuan Wang (Jira)
[ https://issues.apache.org/jira/browse/THRIFT-5512?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17489124#comment-17489124 ] Yuxuan Wang commented on THRIFT-5512: - That page suggests to upgrade junit to 5.8.2 but the latest

[jira] [Commented] (THRIFT-5512) CVEs notified on Maven Central (through deps)

2022-02-08 Thread Jens Geyer (Jira)
[ https://issues.apache.org/jira/browse/THRIFT-5512?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17488981#comment-17488981 ] Jens Geyer commented on THRIFT-5512: {quote}Consider fixing the dep versions and doing a minor