Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CVE scan on HTTPClient version #144

Closed
tbradellis opened this issue Dec 8, 2020 · 1 comment
Closed

CVE scan on HTTPClient version #144

tbradellis opened this issue Dec 8, 2020 · 1 comment
Labels
bug Something isn't working as designed/intended

Comments

@tbradellis
Copy link
Contributor

Customer noted this vulnerability:
https://nvd.nist.gov/vuln/detail/CVE-2020-13956#range-6142636

Description

cpe:2.3:a:apache:httpclient::::::::   Show Matching CPE(s) Up to (excluding)4.5.13
cpe:2.3:a:apache:httpclient::::::::   Show Matching CPE(s) From (including)5.0.0

Expected Behavior

Update to a fixed version

@tbradellis tbradellis added the bug Something isn't working as designed/intended label Dec 8, 2020
@tspring tspring closed this as completed Dec 8, 2020
@tspring
Copy link
Contributor

tspring commented Dec 8, 2020

Fixed in #145

jasonjkeller pushed a commit that referenced this issue Jun 4, 2024
…strings

Change tracestate.* exact values back to strings
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working as designed/intended
Projects
None yet
Development

No branches or pull requests

2 participants