Hi there is a new CVE issue published on 18th of February on kotlinlang #graphql-kotlin

Channels

100daysofkotlin

100daysofkotlin-2021

algolialibraries

android-architecture

android-databinding

androidgithubprojects

androidx-xprocessing

arrow-contributors

beepiz-libraries

cincinnati-user-group

codemash-precompiler

codingconventions

competitive-programming

competitivecoding

compose-android

compose-desktop

compose-ui-showcase

connect-audit-events

cscenter-course-2016

domain-driven-design

effective-kotlin

effectivekotlin

embedded-kotlin

event21-community-content

fb-internal-demo

fluid-libraries

framework-elide

getting-started

github-workflows-kt

graviton-browser

image-processing

intellij-plugins

intellij-tricks

introduce-yourself

java-to-kotlin-refactoring

jhipster-kotlin

jvm-ir-backend-feedback

k2-early-adopters

kotest-contributors

kotlin-by-example

kotlin-data-storage

kotlin-foundation

kotlin-in-action

kotlin-multiplatform-contest

kotlin-pakistan

kotlinforbeginners

kotlingforbeginners

kotlinprogrammers

kotlintest-devs

kotlinultimatechallenge

kotlinx-datetime

lambdaworld_cadiz

language-evolution

language-proposals

leedskotlinusergroup

library-development

machinelearningbawas

myndocs-oauth2-server

navigation-architecture-component

ohio-kotlin-users

pattern-matching

pocketgitclient

practical-functional-programming

prozis-android-backup

python-contributors

realworldkotlin

refactoring-to-kotlin

refreshversions

russian-kotlinasfirst

skia-wasm-interop-temp

sofl-user-group

spring-security

squarelibraries

stayhungrystayfoolish

strife-discord-lib

swagger-gradle-codegen

swiss-user-group

tricity-kotlin-user-group

Title

s

sevil

02/28/2020, 10:50 AM

Hi, there is a new CVE issue published on 18th of February on io.netty dependencies. I just integrated graphql-kotlin to our backend project and started to get security warnings. More information for CVE https://snyk.io/vuln/SNYK-JAVA-ORGWSO2TRANSPORTHTTP-548944 . Any suggestion is appreciated.

The dependency causing the problem added by org.springframework.boot😒pring-boot-starter-reactor-netty:2.2.4.RELEASE which comes with org.springframework.boot😒pring-boot-starter-webflux:2.2.4.RELEASE

d

Dariusz Kuc

02/29/2020, 4:16 AM

thanks for raising this

fix was released in 2.0.0-RC9.1

4 Views

#graphql-kotlin Join Slack