[STORM-3718] Updating the dropwizard dependency

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.3.0
• Flags: Patch
• Assignee: Unassigned
• Reporter: Fannyu Chien
• Created: 01/Dec/20 16:46
• Updated: 08/Dec/20 16:21
• Resolved: 08/Dec/20 16:21

Description

I currently work at JPMC and we are using storm, when we used Aqua to scan the image it detected critical vulnerabilities regarding dropwizard 1.3.5 and recommended patching it to 1.3.19. I have submitted a pull request already but I opened up the issue on Jira just incase.