[
https://issues.apache.org/jira/browse/NIFI-13413?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17855985#comment-17855985
]
Jim Steinebrey commented on NIFI-13413:
---------------------------------------
[~exceptionfactory] Thanks so much for your comments.
I was exploring some different ones and if there is a latest version that fixes
them>
I was going to put them all together, but given your comment I am fine with
splitting them up.
Here is the first one I found that I will put in the ticket.
protobuf-java-2.5.0.jar (pkg:maven/com.google.protobuf/[email protected],
cpe:2.3:a:google:protobuf-java:2.5.0:*:*:*:*:*:*:*,
cpe:2.3:a:protobuf:protobuf:2.5.0:*:*:*:*:*:*:*) : CVE-2022-3171,
CVE-2022-3509, CVE-2021-22569
3.25.3 -> 4.27.1
nifi-protobuf-services pom.xml
> Dependency upgrades for proto-buf-java 3.25.3 -> 4.27.1
> -------------------------------------------------------
>
> Key: NIFI-13413
> URL: https://issues.apache.org/jira/browse/NIFI-13413
> Project: Apache NiFi
> Issue Type: Task
> Components: Extensions
> Affects Versions: 1.26.0, 2.0.0-M3
> Reporter: Jim Steinebrey
> Priority: Major
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
