David Handermann created NIFI-8929:
--------------------------------------

             Summary: Upgrade Apache POI to 5.0.0
                 Key: NIFI-8929
                 URL: https://issues.apache.org/jira/browse/NIFI-8929
             Project: Apache NiFi
          Issue Type: Improvement
          Components: Extensions
    Affects Versions: 1.15.0
            Reporter: David Handermann
            Assignee: David Handermann


The {{nifi-poi-bundle}} and {{nifi-email-bundle}} modules depend on the Apache 
POI library for handling Microsoft documents. The current modules depend on 
4.0.1, which has a vulnerability related to XML External Entity Processing. 
Apache POI 5.0.0 resolves this vulnerability and provides a compatible upgrade.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to