[ 
https://issues.apache.org/jira/browse/KYLIN-5732?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17832150#comment-17832150
 ] 

ASF subversion and git services commented on KYLIN-5732:
--------------------------------------------------------

Commit 3ec3063135f6b99cb4f7934d056a6ca7fd4a1e5e in kylin's branch 
refs/heads/kylin5 from Yinghao Lin
[ https://gitbox.apache.org/repos/asf?p=kylin.git;h=3ec3063135 ]

KYLIN-5732 Upgrade snappy-java to fix vulnerabilities


> High-level security 
> vulnerabilities:maven:org.xerial.snappy:snappy-java@1.1.8.4/CVE-2023-34455
> ----------------------------------------------------------------------------------------------
>
>                 Key: KYLIN-5732
>                 URL: https://issues.apache.org/jira/browse/KYLIN-5732
>             Project: Kylin
>          Issue Type: Bug
>    Affects Versions: 5.0-beta
>            Reporter: zhong.zhu
>            Assignee: zhong.zhu
>            Priority: Critical
>             Fix For: 5.0.0
>
>         Attachments: image-2023-12-05-19-01-48-480.png
>
>
> Vulnerability Details:
> !image-2023-12-05-19-01-48-480.png!
> snyk link: [https://snyk.io/vuln/SNYK-JAVA-ORGXERIALSNAPPY-5710960]
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to