[
https://issues.apache.org/jira/browse/OMID-313?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17948518#comment-17948518
]
ASF GitHub Bot commented on OMID-313:
-------------------------------------
meszinorbi commented on code in PR #192:
URL: https://github.com/apache/phoenix-omid/pull/192#discussion_r2068969862
##########
pom.xml:
##########
@@ -1148,18 +1148,18 @@
<groupId>org.apache.curator</groupId>
<artifactId>curator-test</artifactId>
<exclusions>
- <exclusion>
- <groupId>com.google.guava</groupId>
- <artifactId>guava</artifactId>
- </exclusion>
- <exclusion>
- <groupId>org.apache.zookeeper</groupId>
- <artifactId>zookeeper</artifactId>
- </exclusion>
- <exclusion>
- <groupId>org.junit.jupiter</groupId>
- <artifactId>junit-jupiter-api</artifactId>
- </exclusion>
+ <exclusion>
Review Comment:
Sorry about that, I don't know why this reformatting happened. Working on it.
> Remove commons-logging due to multiple affecting CVEs
> -----------------------------------------------------
>
> Key: OMID-313
> URL: https://issues.apache.org/jira/browse/OMID-313
> Project: Phoenix Omid
> Issue Type: Improvement
> Reporter: Norbert Mészáros
> Priority: Major
>
> Remove commons-logging due to multiple affecting CVEs
> (CVE-2021-37533 CVE-2019-17571 CVE-2021-4104 CVE-2022-23302 CVE-2022-23305
> CVE-2022-23307)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
