[
https://issues.apache.org/jira/browse/NIFI-13879?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17890106#comment-17890106
]
ASF subversion and git services commented on NIFI-13879:
--------------------------------------------------------
Commit 96c807539538e679f9d907aa24713ce7596f4619 in nifi's branch
refs/heads/main from dependabot[bot]
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=96c8075395 ]
NIFI-13879 Upgraded elliptic from 6.5.5 to 6.5.7 for Registry (#9383)
Signed-off-by: David Handermann <[email protected]>
> Upgrade elliptic library to 6.5.7 for Registry
> ----------------------------------------------
>
> Key: NIFI-13879
> URL: https://issues.apache.org/jira/browse/NIFI-13879
> Project: Apache NiFi
> Issue Type: Improvement
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Fix For: 2.0.0-M5
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> The [elliptic|https://github.com/indutny/elliptic] library is a transitive
> dependency used for building the NiFi Registry web user interface. The
> library should be upgraded to 6.5.7 to resolve CVE-2024-48949 related to
> signature verification.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
