ballerina-lang
ballerina-lang copied to clipboard
[Bug]: Fix the security vulnarabilities identified in 1.2.45
Description
The trivy scanner identified the following security vulnerabilities for the Ballerina 1.2.45 release build.
CVE-2021-38153 - from kafka-clients-2.3.1.jar and kafka_2.11-2.3.1.jar is fixed by https://github.com/ballerina-platform/ballerina-lang/pull/41595 and need to release.
The following vulnerabilities need to be addressed in future patches.
CVE-2023-33201- from bcprov-jdk15on-1.69.jarCVE-2023-39017- from quartz-2.3.2.jar
Steps to Reproduce
No response
Affected Version(s)
No response
OS, DB, other environment details and versions
No response
Related area
-> Compilation
Related issue(s) (optional)
https://github.com/wso2-enterprise/internal-support-ballerina/issues/471
Suggested label(s) (optional)
Type/Security
Suggested assignee(s) (optional)
No response