Package
pinot
Component
jetty-http
Latest update
Fixed version
1.5.0-r0
3.7
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
1.5.0-r0Status
Impact
pinot depends on jetty-http 9.x, but a fix is only available in 12.0.12. jetty upstream occasionally perform sponsored backports even to unsupported releases, so either jetty upstream will need to backport a fix to 9.x or pinot upstream will need to move to a supported version of jetty to remediate this vulnerability.
Status
Fixed version
1.5.0-r0Status
Impact
pinot depends on jetty-http 9.x, but a fix is only available in 12.0.12. jetty upstream occasionally perform sponsored backports even to unsupported releases, so either jetty upstream will need to backport a fix to 9.x or pinot upstream will need to move to a supported version of jetty to remediate this vulnerability.
Status
Fixed version
1.5.0-r0Status
Impact
pinot depends on jetty-http 9.x, but a fix is only available in 12.0.12. jetty upstream occasionally perform sponsored backports even to unsupported releases, so either jetty upstream will need to backport a fix to 9.x or pinot upstream will need to move to a supported version of jetty to remediate this vulnerability.
Status