[ 
https://issues.apache.org/jira/browse/NIFI-10090?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

David Handermann updated NIFI-10090:
------------------------------------
    Summary: Upgrade Guava to 31.1 in Toolkit and Registry  (was: Update Guava 
JRE)

> Upgrade Guava to 31.1 in Toolkit and Registry
> ---------------------------------------------
>
>                 Key: NIFI-10090
>                 URL: https://issues.apache.org/jira/browse/NIFI-10090
>             Project: Apache NiFi
>          Issue Type: Bug
>    Affects Versions: 1.16.1, 1.16.2
>            Reporter: Mike R
>            Priority: Minor
>          Time Spent: 1h 20m
>  Remaining Estimate: 0h
>
> The version of guava used is vulnerable to CVE 2020-8908.
> Current version of Guava is 28, located at 
> /nifi-toolkit/lib/guava-28.0-jre.jar. The update can be found at 
> github.com/google/guava/releases



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

Reply via email to