This repository has been archived by the owner on Nov 17, 2023. It is now read-only.

There is a vulnerability in hibernate 5.1.1.Final,upgrade recommended #1039

Open

QiAnXinCodeSafe opened this issue Jan 19, 2021 · 1 comment

QiAnXinCodeSafe commented Jan 19, 2021

incubator-datalab/services/billing-aws/pom.xml

Lines 90 to 94 in 423fa3a

    
           <dependency> 
        
               <groupId>org.hibernate</groupId> 
        
               <artifactId>hibernate-validator</artifactId> 
        
               <version>5.1.1.Final</version> 
        
           </dependency>

CVE-2014-3558 CVE-2019-10219

Recommended upgrade version：5.1.3.FINAL

pjfanning commented Apr 7, 2022

this is updated in master - https://github.com/apache/incubator-datalab/blob/master/services/billing-aws/pom.xml

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.