apache / apache/linkis

[Bug] upgrade hive-exec and hive-jdbc dependencies due to CVEs

Open
#1,364 1 comment 0 reactions 0 assignees View on GitHub
bug
Dominant language
Java
Stars
3.4k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

### Search before asking

- [X] I searched the [issues](https://github.com/apache/incubator-linkis/issues) and found no similar issues.

### Linkis Component

linkis-cg-engineConnplugin

### What happened + What you expected to happen

https://mvnrepository.com/artifact/org.apache.hive/hive-exec shows the CVEs. v2.3.4 seems to be lowest version that is CVE free.

### Relevent platform

n/a

### Reproduction script

n/a

### Anything else

_No response_

### Are you willing to submit a PR?

- [ ] Yes I am willing to submit a PR!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.