This is an automated email from the ASF dual-hosted git repository.
pvillard31 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/nifi.git
The following commit(s) were added to refs/heads/main by this push:
new d0f3cc2cd1d NIFI-15950 Removed Grype ignore for GHSA-72hv-8253-57qq
(#11261)
d0f3cc2cd1d is described below
commit d0f3cc2cd1dd977ed11e9e0e2c0c1be13f15a5c6
Author: David Handermann <[email protected]>
AuthorDate: Mon May 18 15:23:52 2026 -0500
NIFI-15950 Removed Grype ignore for GHSA-72hv-8253-57qq (#11261)
- parquet-jackson 1.17.1 includes newer version of Jackson
- hazelcast 5.7.0 includes newer version of Jackson
---
.grype.yaml | 9 ---------
1 file changed, 9 deletions(-)
diff --git a/.grype.yaml b/.grype.yaml
index d47911f062b..c11729f14aa 100644
--- a/.grype.yaml
+++ b/.grype.yaml
@@ -13,12 +13,3 @@
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
-ignore:
- # Reason: Referencing libraries bundle shaded version of Jackson
- # Mitigating Factors: Jackson Async Parser not used
- # Reference: com.hazelcast:hazelcast:5.6.0
- # Reference: org.apache.parquet:parquet-jackson:1.17.0
- - vulnerability: GHSA-72hv-8253-57qq
- package:
- name: jackson-core
- version: 2.19.2
