Uploaded image for project: 'Data Collection, Analytics, and Events'
  1. Data Collection, Analytics, and Events
  2. DCAEGEN2-3220

dcaegen2-services-sdk vulnerability updates

XMLWordPrintable

      Version upgrade needed for vulnerability addressal. 
       

      Status Priority Component name and version Threat level Recommended version Project’s assessment
      1 ch.qos.logback : logback-core : 1.3.0-alpha0 8.6
       6.6
       5.9
             		 1.2.11 downgrade required
        com.google.code.gson : gson : 2.8.5 7.5
             		 2.9.0  
      2 com.google.protobuf : protobuf-java : 3.6.1 5.5
             		 3.21.1  
      2 org.springframework : spring-webflux : 5.3.1 4.3
             		 5.3.20  
      2 org.springframework.security : spring-security-crypto : 5.4.1 6.5
       5.3
             		 5.7.1  

       

       

        1. image-2022-07-28-10-52-13-233.png
          22 kB
          vv770d
        2. image-2022-07-28-10-56-36-764.png
          22 kB
          vv770d

            pawel pawel
            vv770d vv770d
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: