[
https://issues.apache.org/jira/browse/NIFI-15950?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18081836#comment-18081836
]
ASF subversion and git services commented on NIFI-15950:
--------------------------------------------------------
Commit d0f3cc2cd1dd977ed11e9e0e2c0c1be13f15a5c6 in nifi's branch
refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=d0f3cc2cd1d ]
NIFI-15950 Removed Grype ignore for GHSA-72hv-8253-57qq (#11261)
- parquet-jackson 1.17.1 includes newer version of Jackson
- hazelcast 5.7.0 includes newer version of Jackson
> Remove Grype Ignore for GHSA-72hv-8253-57qq
> -------------------------------------------
>
> Key: NIFI-15950
> URL: https://issues.apache.org/jira/browse/NIFI-15950
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Security
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Minor
> Time Spent: 10m
> Remaining Estimate: 0h
>
> The Grype scanning configuration should be updated to remove the ignored
> vulnerability reference to GHSA-72hv-8253-57qq. The parquet-jackson library
> version 1.17.1 and hazelcast version 5.7.0 resolve the vulnerability
> associated with the older bundled version of Jackson.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
