Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

upgrade vulnerable armeria package #2247

Closed
yuganshmahajan opened this issue Jan 29, 2023 · 4 comments
Closed

upgrade vulnerable armeria package #2247

yuganshmahajan opened this issue Jan 29, 2023 · 4 comments

Comments

@yuganshmahajan
Copy link

The latest version/develop branch comes with armeria: 1.20.3 package, which has high risk vulnerabilities from dependencies : https://mvnrepository.com/artifact/com.linecorp.armeria/armeria/1.20.3
These have been fixed in latest version of armeria : https://mvnrepository.com/artifact/com.linecorp.armeria/armeria/1.21.0
Could someone please upgrade the version to avoid these vulnerabilities.
Thanks.

@ptrthomas
Copy link
Member

done and closing as duplicate of #2083

@yuganshmahajan
Copy link
Author

@ptrthomas Thanks for the quick action :) . Just wanted to ask when is the plan for next release in which we will see this change and use it.

@ptrthomas
Copy link
Member

@yuganshmahajan hard to say. in the meantime I'm pretty sure you can manually override it: #1834

@yuganshmahajan
Copy link
Author

@ptrthomas , yes overriding it manually in the meantime. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants