compuguy opened a new issue, #21457:
URL: https://github.com/apache/pulsar/issues/21457

   ### Search before asking
   
   - [X] I searched in the [issues](https://github.com/apache/pulsar/issues) 
and found nothing similar.
   
   
   ### Version
   
   v3.0.2-candidate-2
   
   ### Minimal reproduce step
   
   Used a container security scanner included with Red Hat Advanced Cluster 
Security for Kubernetes, Stackrox Scanner.
   
   ### What did you expect to see?
   
   Vulnerablities that should of been fixed in 3.0.2 are showing up with the 
included version of Trinio.
   
   ### What did you see instead?
   
   ![Screenshot 2023-10-27 
171327](https://github.com/apache/pulsar/assets/864349/9cd1693e-d8df-4a59-b7cc-aaf04cb63d49)
   - 3 Vulnerabilities that can be fixed
   CVE-2021-42550 - https://nvd.nist.gov/vuln/detail/CVE-2021-42550
   CVE-2023-0833 - https://nvd.nist.gov/vuln/detail/CVE-2023-0833
   CVE-2023-3635 - Okio (1.17.2) - 
https://nvd.nist.gov/vuln/detail/CVE-2023-3635
   
   - 1 of them maybe a false positive:
   CVE-2023-4586 - Netty, Hot Rod client - 
https://nvd.nist.gov/vuln/detail/CVE-2023-4586
   
   
   
   ### Anything else?
   
   _No response_
   
   ### Are you willing to submit a PR?
   
   - [ ] I'm willing to submit a PR!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to