Vulnerabilities in Jetty 9.4.39 used by Jet master

hazelcast / hazelcast-jet

Distributed Stream and Batch Processing

https://jet-start.sh

Other

1.1k stars 205 forks source link

Closed olukas closed 3 years ago

olukas commented 3 years ago

Jet uses eclipse:jetty in version 9.4.39 which includes following vulnerabilities:

CVE-2021-34429 - https://nvd.nist.gov/vuln/detail/CVE-2021-34429 (it should be fixed in version 9.4.43)
CVE-2021-34428 - https://nvd.nist.gov/vuln/detail/CVE-2021-34428 (it should be fixed in version 9.4.41)
CVE-2021-28169 - https://nvd.nist.gov/vuln/detail/CVE-2021-28169 (it should be fixed in version 9.4.41)

mmedenjak commented 3 years ago

I see the commit has been merged so I assume this issue can be closed. @gurbuzali can you confirm?

gurbuzali commented 3 years ago

yes can be closed