[TINKERPOP-2746] Medium security vulnerabilities on logback-core

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Done
• Affects Version/s: 3.6.0
• Fix Version/s: 3.7.0, 3.6.1
• Component/s: console, server
• Assignee: Stephen Mallette
• Reporter: Aaron Coady
• Created: 16/May/22 15:30
• Updated: 17/Jun/22 15:17
• Resolved: 16/Jun/22 00:04

Description

Medium severity security issues have been logged against logback core. They are fixed in the latest version. Below are the details.

Deserialization of Untrusted Data in logback

https://github.com/advisories/GHSA-668q-qrv7-99fm