orangeCatDeveloper commented on issue #2797: URL: https://github.com/apache/hertzbeat/issues/2797#issuecomment-5860842978
Most of the reported components have been upgraded since 1.6.0 (26 of 29 in the 1.9.0 distribution, e.g. commons-compress 1.27.1, Spring 7.0.5, sshd 2.13.1, snappy-java 1.1.10.7). Remaining: `xercesImpl` 2.11.0 (pulled in by easypoi/nekohtml, CVE-2022-23437), now tracked in #4408; `jjwt-impl` 0.11.2 (GHSA-r65j-6h5f-4f92, disputed upstream); `poi` CVE-2022-26336, which only affects `poi-scratchpad`, which HertzBeat does not ship. Closing this one; please re-scan against the latest release and open a new issue for anything still outstanding. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
