marquez
marquez copied to clipboard
Security Vulnerabilities Fixes
The dependencies org.eclipse.parsson:parsson, ch.qos.logback:logback-core, and org.eclipse.jetty.http2:http2-common have been identified as sources of security vulnerabilities in OpenSearch, which is integrated into Marquez.
To mitigate these vulnerabilities, please upgrade OpenSearch to a newer version that addresses these issues and release an updated version of Marquez Image.
Thanks for opening your first issue in the Marquez project! Please be sure to follow the issue template!
@wslulciuc - Can you please review and provide necessary feedback. Note, I see OpenSearch has been bumped up to 2.16.0 in the main branch which will fix the parsson issue however other two might need updated version of logback-core and http2-common in the OpenSearch repository.