[
https://issues.apache.org/jira/browse/NIFI-10006?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Joe Witt updated NIFI-10006:
----------------------------
Fix Version/s: 1.16.2
> Upgrade async from 2.6.3 to 2.6.4 for Registry
> ----------------------------------------------
>
> Key: NIFI-10006
> URL: https://issues.apache.org/jira/browse/NIFI-10006
> Project: Apache NiFi
> Issue Type: Improvement
> Components: NiFi Registry
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Minor
> Fix For: 1.17.0, 1.16.2
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> The [async|https://github.com/caolan/async] library is a transitive
> JavaScript dependency in NiFi Registry support generic asynchronous
> functions. Version 2.6.4 resolves a vulnerability related to prototype
> pollution that is present in 2.6.3.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
