Vulnerability remediation feature-transformation-server image #2471

Activity

1. github-actions

   assigned

   tsotnet

   on Mar 31, 2022
2. achals commented on Mar 31, 2022

   

   achals

   on Mar 31, 2022

   Member

   More actions

   Hi @psheorangithub , thanks for the issue. The feature-transformation-server is actually a python service, and doesn't rely on any java components.

   At the same time, we'll patching these versions to be on the same side.
3. achals commented on Mar 31, 2022

   

   achals

   on Mar 31, 2022

   Member

   More actions

   I've patched jackson; but I believe the jetty vuln is a false positive. We don't use jetty directly, or pull it in transitively. I'm going to close this ticket, but feel free to reopen if you have any other questions.

   [31/03/22 11:12:51] (python-3.7.13) ~/tecton/feast/java   master 
   $ mvn compile dependency:tree | grep jetty
   [31/03/22 11:12:57] (python-3.7.13) ~/tecton/feast/java   master 
   
4. achals

   closed this as completedon Mar 31, 2022