[
https://issues.apache.org/jira/browse/FLINK-14121?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16939380#comment-16939380
]
Gary Yao commented on FLINK-14121:
----------------------------------
Dependency is only used in {{XZInputStreamFactory}}
> Upgrade commons-compress to 1.19 due to CVE
> -------------------------------------------
>
> Key: FLINK-14121
> URL: https://issues.apache.org/jira/browse/FLINK-14121
> Project: Flink
> Issue Type: Bug
> Components: API / DataStream, Build System, Release System
> Affects Versions: 1.9.0
> Reporter: John Lonergan
> Priority: Critical
>
> See
> https://commons.apache.org/proper/commons-compress/security-reports.html
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
