ccaominh opened a new issue #10358: URL: https://github.com/apache/druid/issues/10358
The cassandra-storage extension uses Astyanax, which has been retired and is no longer under active development. The latest version of Astyanax uses an old version of libthrift (0.6.1), which has a few high severity CVEs. The Astyanax project suggests using the Datastax java driver instead. Once Astyanax has been replaced, its CVE suppressions can also be removed. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
