linkedin / cruise-control

Cruise-control is the first of its kind to fully automate the dynamic workload rebalance and self-healing of a Kafka cluster. It provides great value to Kafka users by simplifying the operation of Kafka clusters.
https://github.com/linkedin/cruise-control/tags
BSD 2-Clause "Simplified" License
2.74k stars 585 forks source link

Impacted by CVE-2023-44487? #2070

Open showuon opened 11 months ago

showuon commented 11 months ago

As the critical vulnerability CVE-2023-44487 is reported, I'd like to know if cruise control is impacted by it? From the dependency check, it looks like we don't include http2 modules from netty and jetty, so we are safe... right?