[HIVE-28497] Address CVE due to commons-codec:commons-codec:jar:1.11

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.1.0
• Labels: pull-request-available
• Assignee: Kiran Velumuri
• Reporter: Kiran Velumuri
• Created: 03/Sep/24 11:58
• Updated: 13/Sep/24 15:34
• Resolved: 13/Sep/24 15:34

Description

The vulnerability sonatype-2012-0050 comes from commons-codec:commons-codec:jar:1.11 dependency in the hive-standalone-metastore-server module.

Issue Links

• links to: GitHub Pull Request #5429