New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Potential to update AWS SDK version #41

Open

bakelew opened this issue Dec 6, 2023 · 0 comments

bakelew commented Dec 6, 2023

Hi there, just wanted to bring an issue to attention of the developers around this dependency

logback-awslogs-appender/pom.xml

Line 63 in 1cda000

<version>2.16.65</version>

The AWS SDK package used is fairly old (2.16.65 / May 18, 2021)

The older versions have some vulnerabilities that are already fixed by AWS such as:

Uplift netty to address CVE-2023-44487 aws/aws-sdk-java-v2#4575

Would it be possible to update this dependency?

Thank you very much!

bakelew changed the title ~~AWS SDK vulnerability~~ Potential to update AWS SDK version

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment