[TINKERPOP-2669] Netty 4.1.61 flagged with medium severity security violations

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Done
• Affects Version/s: 3.4.12, 3.5.1
• Fix Version/s: 3.6.0, 3.4.13, 3.5.2
• Component/s: server
• Assignee: Stephen Mallette
• Reporter: Aaron Coady
• Created: 15/Dec/21 14:04
• Updated: 15/Dec/21 18:47
• Resolved: 15/Dec/21 18:18

Description

In addition to the two vulnerabilities addressed in https://issues.apache.org/jira/browse/TINKERPOP-2632

 

Netty 4.1.61 has a medium security vulnerability described here:
https://nvd.nist.gov/vuln/detail/CVE-2021-43797

The scan report identifies that these issues are addressed in version 4.1.71