Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2023-2976 - MockServer & Proxy Netty » 5.15.0 #1781

Open
vshettigar-panw opened this issue Jul 26, 2023 · 2 comments
Open

CVE-2023-2976 - MockServer & Proxy Netty » 5.15.0 #1781

vshettigar-panw opened this issue Jul 26, 2023 · 2 comments

Comments

@vshettigar-panw
Copy link

vshettigar-panw commented Jul 26, 2023 •
edited
Loading

CVE-2023-2976 Vulnerability reported from com.google.guava » guava dependency in maven repository(https://mvnrepository.com/artifact/org.mock-server/mockserver-netty/5.15.0) Quick remediation would be to update from 31.1-jre version to 32.1.1-jre version
@bknitter-panw
Copy link

Is there any update on this?

mehtasankets added a commit to mehtasankets/mockserver that referenced this issue Jun 8, 2024
@mehtasankets
Bump up guava version
9fdcc80 
Google guava version upgrade to address mock-server#1781 CVE-2023-2976
@mehtasankets mehtasankets mentioned this issue Jun 8, 2024
Open
@mehtasankets
Copy link

@jamesdbloom I've raised a MR to upgrade guava version. Requesting the review for the same.
Also, adding few observations:

  1. Seems like MR pipelines are failing, Same is the case with the MR I've raised. It seems like it's due to test failures in MockServer & Proxy Netty module.
  2. Library code is compatible with JDK < 17. May be we should update CONTRIBUTING.md documentation to highlight the same until JDK 17+ is supported?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@mehtasankets @bknitter-panw @vshettigar-panw