Next Version

[suhanth94]

Hi, this library is internally using grpc-netty-shaded JAR which has vulnerabilities . When can we expect these fixed and the next version be released?

[jvmlet]

Are you after the build with latest grpc version 1.52.1 ?

[suhanth94]

https://nvd.nist.gov/vuln/detail/cve-2017-12613
https://nvd.nist.gov/vuln/detail/CVE-2021-35940
https://nvd.nist.gov/vuln/detail/CVE-2022-41881
https://nvd.nist.gov/vuln/detail/CVE-2022-41915

[suhanth94]

I expect some of these to be resolved if we update grpc version to 1.52.1

[suhanth94]

@jvmlet can you please help on the above query? We are waiting for the new version.

[jvmlet]

https://github.com/LogNet/grpc-spring-boot-starter/blob/master/ReleaseNotes.md

[suhanth94]

@jvmlet we are still using java 11 in our application. are we not releasing compatible versions for older java versions?