New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Upgrade minor jetty version to fix vulnerability #17477

Open

ashibhardwaj wants to merge 1 commit into apache:master from ashibhardwaj:abhardwaj/upgrade_jetty_version

+2 −2

ashibhardwaj commented Nov 14, 2024

Upgrading jetty from version 9.4.54.v20240208 to 9.4.56.v20240826 to fix CVE-2024-8184.

Refer: https://avd.aquasec.com/nvd/cve-2024-8184
(org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks)


          Upgrade minor jetty version to fix vulnerabilities

a6e01a4

github-actions bot added the Area - Dependencies label

Contributor

Akshat-Jain commented Nov 14, 2024

Hi @ashibhardwaj, thanks for contributing to Druid!
It appears that this change is already included in the following patch by @findingrish: #17385.

# for free to join this conversation on GitHub. Already have an account? # to comment

Labels

Area - Dependencies