About RCE 0Days Vulnerability

spring-attic / spring-integration-kafka

Apache License 2.0

324 stars 180 forks source link

About RCE 0Days Vulnerability #312

Closed zxgdll closed 2 years ago

zxgdll commented 2 years ago

Is spring-integration-kafka affected by rce vulnerability? If so, will a new version be released?

cve-2022-2296 :Spring Framework RCE via Data Binding on JDK 9+ https://tanzu.vmware.com/security/cve-2022-22965

garyrussell commented 2 years ago

spring-integration-kafka is not affected. In any case, this project is no longer active; the code was moved to the main spring-integration repository nearly 2 years ago https://github.com/spring-projects/spring-integration