David Handermann created NIFI-10271:
---------------------------------------
Summary: Upgrade Xerces to 2.12.2
Key: NIFI-10271
URL: https://issues.apache.org/jira/browse/NIFI-10271
Project: Apache NiFi
Issue Type: Improvement
Reporter: David Handermann
Assignee: David Handermann
Several extension components, including Scripting Processors and Media
Processors, depend on Xerces 2.12.1, which is vulnerable to resource exhaustion
when parsing crafted XML documents, as described in
[CVE-2022-23437|https://nvd.nist.gov/vuln/detail/CVE-2022-23437].
Xerces 2.12.2 addresses CVE-2022-23437.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
