kafka-connect-storage-common icon indicating copy to clipboard operation
kafka-connect-storage-common copied to clipboard

Vulnerable packages detected in kafka-connect-storage-common git

Open pranayk01 opened this issue 3 years ago • 2 comments

  1. https://nvd.nist.gov/vuln/detail/CVE-2022-24823 Fixed in 4.1.77 version

  2. https://nvd.nist.gov/vuln/detail/CVE-2022-2048 Fixed in 9.4.48.v20220622

pranayk01 avatar Sep 21 '22 11:09 pranayk01

Added a PR for this, https://github.com/confluentinc/kafka-connect-storage-common/pull/271

pranayk01 avatar Sep 21 '22 11:09 pranayk01

Thank you for raising this issue. We are aware of those issues and plan on addressing them in an upcoming release cycle.

janjwerner-confluent avatar Oct 10 '22 15:10 janjwerner-confluent