Upgrade com.microsoft.azure:azure-eventhubs to version 3.2.1 or higher

logstash-plugins / logstash-input-azure_event_hubs

Logstash input for consuming events from Azure Event Hubs

Apache License 2.0

18 stars 30 forks source link

Closed cspring86 closed 1 week ago

cspring86 commented 2 weeks ago

We're using a security tool called Snyk to scan our containers and it's reported a Critical vulnerability in "com.microsoft.azure:azure-eventhubs".

I can see from the lib/logstash-input-azure_event_hubs.rb file that this project is using version 2.3.2, which is vulnerable.

When will this project be looking to upgrade to version 3.2.1 or higher?

robbavey commented 1 week ago

A new version of the plugin has been released.

Please update to version 1.5.0