[
https://issues.apache.org/jira/browse/TINKERPOP-2880?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Yang Xia closed TINKERPOP-2880.
-------------------------------
Resolution: Not A Bug
Closing per discussion on dev:
https://lists.apache.org/thread/hz3rf0rr79198g97kn9k92x46h2goo0k
> Deserialization of Untrusted Data in Neo4j
> ------------------------------------------
>
> Key: TINKERPOP-2880
> URL: https://issues.apache.org/jira/browse/TINKERPOP-2880
> Project: TinkerPop
> Issue Type: Improvement
> Components: neo4j
> Affects Versions: 3.6.2
> Reporter: Jim Foscue
> Priority: Major
> Labels: Ironbank
>
> Vulnerability in neo4j-3.4.11.
> Need to update to 3.5 or higher.
> [https://github.com/advisories/GHSA-pc4w-8v5j-29w9]
>
> Package path...
> * /opt/gremlin-server/ext/neo4j-gremlin/lib/neo4j-3.4.11.jar
> * /opt/gremlin-server/ext/neo4j-gremlin/plugin/neo4j-3.4.11.jar
> * /root/.groovy/grapes/org.neo4j/neo4j/jars/neo4j-3.4.11.jar
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
