jetty / jetty.project

Eclipse Jetty® - Web Container & Clients - supports HTTP/2, HTTP/1.1, HTTP/1.0, websocket, servlets, and more
https://eclipse.dev/jetty
Other
3.86k stars 1.91k forks source link

Update apache avro to address CVE #12365

Closed joakime closed 1 month ago

joakime commented 1 month ago
joakime commented 1 month ago

@olamy I cannot find a place where we use Apache Avro in the code tree. Not even via mvn dependency:tree. Is it arriving via something else?

olamy commented 1 month ago

no failure so just needed anymore :) It was probably some transitive dependencies of infinispan.