[
https://issues.apache.org/jira/browse/FLINK-36469?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rui Fan updated FLINK-36469:
----------------------------
Affects Version/s: kubernetes-operator-1.9.0
(was: kubernetes-operator-1.10.0)
> Bump commons-io from 2.11.0 to 2.17.0
> -------------------------------------
>
> Key: FLINK-36469
> URL: https://issues.apache.org/jira/browse/FLINK-36469
> Project: Flink
> Issue Type: Improvement
> Components: Kubernetes Operator
> Affects Versions: kubernetes-operator-1.9.0
> Reporter: Siddharth R
> Assignee: Siddharth R
> Priority: Major
> Labels: pull-request-available
> Fix For: kubernetes-operator-1.10.0
>
>
> Commons-io version 2.11.0 has a direct vulnerability and bumping it to the
> newer version (2.17.0) will remediate this finding.
> *Direct vulnerabilities:*
> [CVE-2024-47554|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47554]
>
> Package details:
> [https://mvnrepository.com/artifact/commons-io/commons-io/2.17.0]
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
