Details
-
Task
-
Status: Open
-
Critical
-
Resolution: Unresolved
-
Impala 4.2.0
-
None
-
None
-
ghx-label-7
Description
pac4j has released a few more patchset releases for the 4.5 series, and they bump the versions of dependencies to address CVEs (e.g. springframework). Our build already overrides the versions for dependencies with CVEs (e.g. springframework), but we should adopt the newer 4.5.7 version to bring the versions back into alignment.