Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-13539

Infinispan 12.0.1.Final vulnerability fix and compatibility with Spring Boot 2.4.13

    XMLWordPrintable

Details

    • Task
    • Resolution: Unresolved
    • Major
    • 12.1.4.Final, 11.0.13.Final
    • None
    • None
    • None
    • Compatibility/Configuration

    Description

      There is a vulnerability discovered in infinispan https://nvd.nist.gov/vuln/detail/CVE-2021-31917. WhiteSource claims that it was fixed in version 12.0.1.Final, however, no proofs were provided. We would appreciate if you've clarified if this vulnerability has really been fixed in that version and provide a link to commit or tag which contained a fix.

      Second important thing for us is infinispan 12.0.1.Final​ compatibility with Spring Boot 2.4.13​.
      Spring Boot 2.4.13​ comes with several infinispan libraries of version 11.0.11.Final​. But since 12.0.1.Final is a different major version compared to 11.0.11​, the question arises - is it compatible with Spring Boot 2.4.13​?

      Attachments

        Activity

          People

            Unassigned Unassigned
            ivan.viaznikov Ivan Viaznikov (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated: