Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request]: Upgrade confluent-kafka-dotnet to 2.0.2 due to security vulnerability in Newtonsoft Json < 13 #354

Open
guidowalter opened this issue Jan 30, 2023 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@guidowalter
Copy link

Is your request related to a problem you have?

Hi,

we are using Mendt as SCT and SAST scanning software. They identified a vulnerability in NewtonSoft Json last year, which was fixed in Version 13 and up:

image JamesNK/Newtonsoft.Json@7e77bbe

A few days ago Confluent finally bumped their Kafka client version to 2.0.2 using NewtonSoft Json > 13. It would be great if you could bump the kafka client version within Kafka Flow to mitigate this issue.

This bump would also fix:
image as this is also due to usage of a NewtonSoft Json version <13.

Describe the solution you'd like

Bump to 2.0.2
Bump to 2.0.2

Are you able to help bring it to life and contribute with a Pull Request?

Yes

Additional context

No response

@guidowalter guidowalter added the enhancement New feature or request label Jan 30, 2023
@guidowalter guidowalter changed the title [Feature Request]: Upgrade confluent-kafka-dotnet to 2.0.2 due to security vulnerability in Newtonsoft Jsin < 13 [Feature Request]: Upgrade confluent-kafka-dotnet to 2.0.2 due to security vulnerability in Newtonsoft Json < 13 Jan 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Development

No branches or pull requests

2 participants