Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

resolve security check #1479

Closed
daizhenyu opened this issue Mar 26, 2024 · 0 comments · Fixed by #1480
Closed

resolve security check #1479

daizhenyu opened this issue Mar 26, 2024 · 0 comments · Fixed by #1480
Labels
kind/enhancement Issues or PRs releated to sermant enhancement
Milestone
v1.4.0

Comments

@daizhenyu
Copy link
Collaborator

daizhenyu commented Mar 26, 2024 •
edited
Loading

What would you like to be enhanced?

update component version to resolve security vulnerabilities

Why is this needed?

Component Version CVE
zookeeper 3.8.3 CVE-2024-23944
json 20230227 CVE-2023-5072
tomcat-embed 9.0.83 CVE-2024-22029
tomcat-embed 9.0.83 CVE-2024-23672
tomcat-embed 9.0.83 CVE-2024-24549
spring-framework 5.3.31 CVE-2024-22243
spring-framework 5.3.31 CVE-2024-22259
@daizhenyu daizhenyu added the kind/enhancement Issues or PRs releated to sermant enhancement label Mar 26, 2024
@daizhenyu daizhenyu mentioned this issue Mar 26, 2024
Merged
3 tasks
@hanbingleixue hanbingleixue added this to the v1.4.0 milestone Mar 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
kind/enhancement Issues or PRs releated to sermant enhancement
Projects
None yet
Milestone
v1.4.0
Development

Successfully merging a pull request may close this issue.

Fix open source component vulnerabilities daizhenyu/Sermant
2 participants
@hanbingleixue @daizhenyu