[
https://issues.apache.org/jira/browse/CXF-9068?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17902645#comment-17902645
]
John Yin commented on CXF-9068:
-------------------------------
Hi [~ffang],
Great! CXF 4.1 will be a wonderful holiday present! Thanks!
Merry Christmas to all of you!
Thanks,
John
> Vulnerability (Denial of Service) in jetty server
> -------------------------------------------------
>
> Key: CXF-9068
> URL: https://issues.apache.org/jira/browse/CXF-9068
> Project: CXF
> Issue Type: Bug
> Components: Transports
> Affects Versions: 4.0.5
> Reporter: Milan Siebenbürger
> Priority: Major
>
> Hello,
>
> snyk.io has discovered a vulnerability in Jetty Server
> ([https://security.snyk.io/vuln/SNYK-JAVA-ORGECLIPSEJETTY-8186142] ), which
> was introduced via org.apache.cxf:cxf-rt-transports-http-jetty@4.0.5
>
> Is it possible to fix or mitigate this issue?
> thanks
> Milan Siebenbürger
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
