[
https://issues.apache.org/jira/browse/KUDU-3629?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17901561#comment-17901561
]
Mateusz Gajewski commented on KUDU-3629:
----------------------------------------
Netty 4.1.110.Final shaded in kudu-client-1.17.1.jar (GHSA-xq3w-v528-46rv)
Protobuf-java 3.21.12 shaded in kudu-client-1.17.1.jar (GHSA-735f-pc8j-v9w8)
> 2 high CVEs in kudu-client
> --------------------------
>
> Key: KUDU-3629
> URL: https://issues.apache.org/jira/browse/KUDU-3629
> Project: Kudu
> Issue Type: Bug
> Components: client
> Affects Versions: 1.17.0
> Reporter: Mateusz Gajewski
> Priority: Major
>
> There are outdated protobuf and netty libraries being shaded in kudu-client
> 1.17.1 which cannot be updated. Using `unshaded` artifact isn't an option as
> it doesn't ship the compiled protobuf classes.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
