This message was deleted.

Some may not affect how Druid uses the "offending" libraries, you can see explicit supressions here: https://github.com/apache/druid/blob/master/owasp-dependency-check-suppressions.xml As to who is best to speak to? I think the #C030CMF6B70 channel is a good start.