Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Transitive CVE-2021-27568 #22

Closed
jakobbraun opened this issue Jul 12, 2021 · 1 comment · Fixed by #23
Closed

Transitive CVE-2021-27568 #22

jakobbraun opened this issue Jul 12, 2021 · 1 comment · Fixed by #23
Labels
bug Unwanted / harmful behavior

Comments

@jakobbraun
Copy link
Contributor

This project has a vulnerability cause by a transitive dependency to net.minidev:json-smart:jar:2.3 via use by this projects dependency org.apache.hadoop:hadoop-client:jar.
@jakobbraun jakobbraun added bug Unwanted / harmful behavior source:exasol labels Jul 12, 2021
@morazow
Copy link
Contributor

morazow commented Jul 12, 2021

Thanks @jakobbraun,

I have received an email from checker. Going to fix it soon.

morazow added a commit that referenced this issue Jul 12, 2021
@morazow
Fixed transitive dependency with vulnerability.
5a92188 
Fixes #22.
@morazow morazow mentioned this issue Jul 12, 2021
Merged
morazow added a commit that referenced this issue Jul 12, 2021
@morazow @jakobbraun
#22: Fixed transitive dependency with vulnerability (#23)
3a4b889 
Fixes #22.

Co-authored-by: jakobbraun <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Unwanted / harmful behavior
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Fixed transitive dependency with vulnerability exasol/parquet-io-java
2 participants
@morazow @jakobbraun