Skip to content
This repository has been archived by the owner on Mar 30, 2022. It is now read-only.

CVE After upgrading to 1.7.7.1 #143

Open
vijeyanidhi opened this issue Mar 9, 2022 · 0 comments
Open

CVE After upgrading to 1.7.7.1 #143

vijeyanidhi opened this issue Mar 9, 2022 · 0 comments

Comments

@vijeyanidhi
Copy link

vijeyanidhi commented Mar 9, 2022

Hi all,
We are running a OWSAP dependency checker and got the following CVE

CVE-2022-23635 -> CWE-287

Location Component Name Component Version Group
istio-model-1.7.7.1 me.snowdrop:istio-model 1.7.7.1 N
  1. Is https://mvnrepository.com/artifact/me.snowdrop/istio-client/1.7.7.1 EOL ? Is that why there are no new versions have been released since Feb 2021?

  2. When does me.snowdrop/istio-client is planning to release a new version that has the fix for CVE-2022-23635 ?

Please review my above query and a quick response is highly appreciated.

Thank you.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant