[
https://issues.apache.org/jira/browse/CASSANDRA-18146?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17676361#comment-17676361
] Brandon Williams commented on CASSANDRA-18146: ---------------------------------------------- ||Branch||CI|| |[3.0|https://github.com/driftx/cassandra/tree/CASSANDRA-18146-3.0]|[j8|https://app.circleci.com/pipelines/github/driftx/cassandra/766/workflows/67258c54-3a86-45d8-bbed-c2e6804bb299]| |[3.11|https://github.com/driftx/cassandra/tree/CASSANDRA-18146-3.11]|[j8|https://app.circleci.com/pipelines/github/driftx/cassandra/764/workflows/afe9a03c-b1d2-49ec-92ff-298fd080be12]| |[4.0|https://github.com/driftx/cassandra/tree/CASSANDRA-18146-4.0]|[j8|https://app.circleci.com/pipelines/github/driftx/cassandra/767/workflows/27d9948e-efe3-4534-94c7-f14b3e2c95cd], [j11|https://app.circleci.com/pipelines/github/driftx/cassandra/767/workflows/478662cf-6f37-4a9d-b72d-8480ed69d696]| |[4.1|https://github.com/driftx/cassandra/tree/CASSANDRA-18146-4.1]|[j8|https://app.circleci.com/pipelines/github/driftx/cassandra/768/workflows/896e3f91-9872-4064-b0ff-c7fe0b072deb], [j11|https://app.circleci.com/pipelines/github/driftx/cassandra/767/workflows/478662cf-6f37-4a9d-b72d-8480ed69d696]| |[trunk|https://github.com/driftx/cassandra/tree/CASSANDRA-18146-trunk]|[j8|https://app.circleci.com/pipelines/github/driftx/cassandra/765/workflows/48bb0afd-f8ae-4f09-ad09-d96a2cb93561], [j11|https://app.circleci.com/pipelines/github/driftx/cassandra/765/workflows/5baddcd1-fa80-4d87-aa7c-07cfe82627e9]| > commons-cli vulnerability: CVE-2021-37533 > ----------------------------------------- > > Key: CASSANDRA-18146 > URL: https://issues.apache.org/jira/browse/CASSANDRA-18146 > Project: Cassandra > Issue Type: Bug > Components: Dependencies > Reporter: Brandon Williams > Assignee: Brandon Williams > Priority: Normal > Fix For: 3.0.x, 3.11.x, 4.0.x, 4.1.x, 4.x > > > This CVE is being reported by the OWASP scan for: > commons-cli-1.1.jar: CVE-2021-37533 > commons-codec-1.9.jar: CVE-2021-37533 > commons-math3-3.2.jar: CVE-2021-37533 > additionally commons-lang3-3.1.jar is also reported on 3.x. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
