Prashil Gupta
Prashil Gupta
**Describe the bug** Seeing timeout and crash of worker threads when policy tar containing large numeber of policy is pushed **To Reproduce** running the api source docker compose reference provided...
I used https://github.com/jfrog/jfrog-CVE-2022-21449 to check for our microservice and found that bcpkix-jdk15on might be vulnerable. Can you please confirm which version should we upgrade to if available for this CVE?...
CVE found - https://nvd.nist.gov/vuln/detail/CVE-2021-39194 com.charleskorn.kaml:kaml:0.20.0 \--- com.squareup.wire:wire-compiler:3.7.1 \--- software.amazon.glue:schema-registry-serde:1.1.13 \--- com.amazonaws:amazon-kinesis-producer:0.14.13 
**Type**: Bug **Component**: "SQS" **AWS Spring 3 still depends on aws spring 2 libs** ``` . ____ _ __ _ _ /\\ / ___'_ __ _ _(_)_ __ __ _...