Mike R created NIFI-10083:
-----------------------------
Summary: Upgrade xmlsec-1.5.8 To Most Recent Version
Key: NIFI-10083
URL: https://issues.apache.org/jira/browse/NIFI-10083
Project: Apache NiFi
Issue Type: Bug
Affects Versions: 1.16.2, 1.16.1
Reporter: Mike R
The version of xmlsec-1.5.8 found at
/nifi-toolkit-current/lib/xmlsec-1.5.8.jar is vulnerable per
[https://github.com/advisories/GHSA-j8wc-gxx9-82hx,] which says that "All
versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7
are vulnerable" to CVE [NVD - CVE-2021-40690
(nist.gov)|https://nvd.nist.gov/vuln/detail/CVE-2021-40690]
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
