data-transfer-project icon indicating copy to clipboard operation
data-transfer-project copied to clipboard
verified publisher icon google

There is a vulnerability in Jetty: Java based HTTP/1.x, HTTP/2, Servlet, WebSocket Server 9.4.8.v20171121,upgrade recommended

Open QiAnXinCodeSafe opened this issue 5 years ago • 0 comments

https://github.com/google/data-transfer-project/blob/d5c4479d817d5b363af8d07ee757fe99f8713cc8/extensions/transport/portability-transport-jettyrest/build.gradle#L31

CVE-2017-7658 CVE-2017-7657 CVE-2017-7656 CVE-2018-12545

Recommended upgrade version：9.4.35.v20201120

QiAnXinCodeSafe avatar Dec 29 '20 07:12 QiAnXinCodeSafe