[
https://issues.apache.org/jira/browse/FLINK-36537?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sergey Nuyanzin resolved FLINK-36537.
-------------------------------------
Fix Version/s: 2.0.0
Resolution: Fixed
> Bump snappy-java from 1.1.10.4 to 1.1.10.7
> ------------------------------------------
>
> Key: FLINK-36537
> URL: https://issues.apache.org/jira/browse/FLINK-36537
> Project: Flink
> Issue Type: Improvement
> Reporter: Siddharth R
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.0.0
>
>
> The current version has vulnerability in the dependant package, bumping it to
> the latest version will remediate.
> *Vulnerabilities from dependencies:*
> [CVE-2024-23454|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23454]
> [CVE-2022-26612|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26612]
> Package details:
> [https://mvnrepository.com/artifact/org.xerial.snappy/snappy-java/1.1.10.7]
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
