[
https://issues.apache.org/jira/browse/ZOOKEEPER-4390?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ananya Singh reassigned ZOOKEEPER-4390:
---------------------------------------
Assignee: Ananya Singh
> Backport ZOOKEEPER-4337 for branch-3.5 and branch-3.6
> -----------------------------------------------------
>
> Key: ZOOKEEPER-4390
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4390
> Project: ZooKeeper
> Issue Type: Bug
> Components: security
> Affects Versions: 3.5.9
> Reporter: Ananya Singh
> Assignee: Ananya Singh
> Priority: Major
> Labels: pull-requests-available
>
> Our security tool raised the following security flaws on zookeeper 3.5.9:
> CVE-2021-28163:
> [https://nvd.nist.gov/vuln/detail/CVE-2021-28163|https://nvd.nist.gov/vuln/detail/CVE-2021-21295]
> CVE-2021-28169:
> [https://nvd.nist.gov/vuln/detail/CVE-2021-28169|https://nvd.nist.gov/vuln/detail/CVE-2021-21295]
> CVE-2021-34428:
> [https://nvd.nist.gov/vuln/detail/CVE-2021-34428|https://nvd.nist.gov/vuln/detail/CVE-2021-21295]
>
> It is a vulnerability related to jar jetty-http-9.4.35.v20201120.jar
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
