Add fix for CVE-2024-7254 - Githubissues

Consensys / teku

Open-source Ethereum consensus client written in Java

https://consensys.io/teku

Apache License 2.0

662 stars 278 forks source link

Add fix for CVE-2024-7254 #8647

Closed StefanBratanov closed 1 week ago

StefanBratanov commented 1 week ago

PR Description

Upgrade jvm-libp2p which was using a version of com.google.protobuf which had vulnerability https://avd.aquasec.com/nvd/2024/cve-2024-7254/

Fixed Issue(s)

N/A

Documentation

[X] I thought about documentation and added the doc-change-required label to this PR if updates are required.

Changelog

[X] I thought about adding a changelog entry, and added one if I deemed necessary.