treasure-data/omnibus-td-agent

Vulnerablity issue CVE-2020-10663

Closed this issue · 3 comments

hi,

Hi,
One vulnerability is reported on json-2.0.4 - CVE-2020-10663
So what is the recommendation? Is this vulnerability really applicable?

No problem because latest td-agent 3/4 doesn't have this problem.

we are using td-agent 3.8.0

You know td-agent 3.8.0 uses ruby 2.4.10 and ruby 2.4.10 doesn't have this problem.
Maybe, your security scanner has a problem. #265 is also false alert.