pjfanning opened a new issue, #7367: URL: https://github.com/apache/paimon/issues/7367
### Search before asking - [x] I searched in the [issues](https://github.com/apache/paimon/issues) and found nothing similar. ### Paimon version https://github.com/advisories/GHSA-cmp6-m4wj-q63q The fix is only in at.yawk.lz4:lz4-java - the java package name is stil the same. You just need to change the maven groupId because the org.lz4 jars are no longer maintained. ### Compute Engine n/a ### Minimal reproduce step n/a ### What doesn't meet your expectations? Need to use most secure versions of dependencies ### Anything else? _No response_ ### Are you willing to submit a PR? - [ ] I'm willing to submit a PR! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
