[ 
https://issues.apache.org/jira/browse/HADOOP-18323?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18036568#comment-18036568
 ] 

ASF GitHub Bot commented on HADOOP-18323:
-----------------------------------------

github-actions[bot] commented on PR #4522:
URL: https://github.com/apache/hadoop/pull/4522#issuecomment-3507233776

   We're closing this stale PR because it has been open for 100 days with no 
activity. This isn't a judgement on the merit of the PR in any way. It's just a 
way of keeping the PR queue manageable.
   If you feel like this was a mistake, or you would like to continue working 
on it, please feel free to re-open it and ask for a committer to remove the 
stale tag and review again.
   Thanks all for your contribution.




> Bump javax.ws.rs-api To Version 3.1.0
> -------------------------------------
>
>                 Key: HADOOP-18323
>                 URL: https://issues.apache.org/jira/browse/HADOOP-18323
>             Project: Hadoop Common
>          Issue Type: Bug
>    Affects Versions: 3.3.3
>            Reporter: Ashutosh Gupta
>            Assignee: Ashutosh Gupta
>            Priority: Critical
>              Labels: pull-request-available
>          Time Spent: 50m
>  Remaining Estimate: 0h
>
> Current version of  javax.ws.rs-api is 2.1.1 - which has a vulnerable 
> dependency to 
> [CVE-2020-15250|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250]
> Lets Upgrade to 3.1.0



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to