Hey team We are updating the datahub images to 0.10.4 version but with that new vulnerabilities are introduced mostly in every image : Guava, snappy Java and spring boot autoconfigure What’s the impact of these ones and can we resolve that?

@orange-night-91387 might be able to speak to this!

Do you have a list of CVEs that are particularly concerning to you? If so we can try to prioritize those. I'm only seeing the snappy Java one on our end which is a high not a critical so it's not an immediate priority for us. That one is a DoS if intentionally malicious input is sent into a function that we do not appear to use directly so it is most likely not exploitable, but we will upgrade that dependency as a part of our regular security updates.

Yeah let me share the CVEs to you