Re: [D] The jetty version in pulsar has security risks. [pulsar]

[via GitHub]

GitHub user opencmit2 closed a discussion: The jetty version in pulsar has 
security risks.

The jetty version in pulsar has security risks. We scanned the security 
vulnerability CVE-2024-6763 through security tools. The affected jetty versions 
are from 7.0.0 through 12.0.11. Our company uses pulsar-2.10. Can we upgrade 
the jetty version in pulsar to the highest version? Or can we fix this 
CVE-2024-6763 vulnerability?
![image](https://github.com/user-attachments/assets/7917b1e4-a16d-4bbd-af10-30ad2bc49a72)


GitHub link: https://github.com/apache/pulsar/discussions/24113

----
This is an automatically sent email for commits@pulsar.apache.org.
To unsubscribe, please send an email to: commits-unsubscr...@pulsar.apache.org