[FLINK-8308] Update yajl-ruby dependency to 1.3.1 or higher

• Type: Improvement
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 1.4.2, 1.5.0
• Component/s: Project Website
• Assignee: Steven Langbroek
• Reporter: Fabian Hueske
• Created: 22/Dec/17 10:02
• Updated: 27/Apr/21 18:05
• Resolved: 16/Feb/18 09:05

Description

We got notified that yajl-ruby < 1.3.1, a dependency which is used to build the Flink website, has a security vulnerability of high severity.

We should update yajl-ruby to 1.3.1 or higher.

Since the website is built offline and served as static HTML, I don't think this is a super critical issue (please correct me if I'm wrong), but we should resolve this soon.

Issue Links

• links to: GitHub Pull Request #5395