[ 
https://issues.apache.org/jira/browse/NIFI-9986?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

David Handermann updated NIFI-9986:
-----------------------------------
    Summary: Upgrade Commons Configuration 2 for Accumulo  (was: Upgraded 
Commons Configuration 2 for Accumulo)

> Upgrade Commons Configuration 2 for Accumulo
> --------------------------------------------
>
>                 Key: NIFI-9986
>                 URL: https://issues.apache.org/jira/browse/NIFI-9986
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Extensions
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Minor
>              Labels: dependency-upgrade
>
> Components in the {{nifi-accumulo-bundle}} have a transitive dependency on 
> Apache Commons Configuration 2 version 2.5, which has a vulnerability 
> associated with YAML parsing. Although this vulnerability does not appear to 
> impact Accumulo usage of the library, Commons Configuration 2 should be 
> upgraded to 2.7.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

Reply via email to