David Handermann created NIFI-10046:
---------------------------------------
Summary: Upgrade Gson to 2.9.0
Key: NIFI-10046
URL: https://issues.apache.org/jira/browse/NIFI-10046
Project: Apache NiFi
Issue Type: Improvement
Components: Extensions, Tools and Build
Reporter: David Handermann
Assignee: David Handermann
Multiple extension and tools depend on different version of Gson for JSON
parsing and serialization. Gson versions prior to 2.8.9 have an associated
vulnerability [CVE-2022-25647|https://nvd.nist.gov/vuln/detail/CVE-2022-25647]
related to deserialization of untrusted data. The Gson version should be
managed in the root Maven configuration for consistency and upgraded to 2.9.0.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
