Vulnerabilities in avro and avro-ipc-jetty used by Jet

hazelcast / hazelcast-jet

Distributed Stream and Batch Processing

https://jet-start.sh

Other

1.1k stars 205 forks source link

Open olukas opened 3 years ago

olukas commented 3 years ago

Jet uses org.apache.avro:avro and org.apache.avro:avro-ipc-jetty in version 1.10.2 which includes following vulnerability:

gurbuzali commented 3 years ago

1.10.2 is the latest version of avro