Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Examine and lucene version #396

Open
bielu opened this issue Nov 10, 2024 · 3 comments
Open

Examine and lucene version #396

bielu opened this issue Nov 10, 2024 · 3 comments

Comments

@bielu
Copy link

bielu commented Nov 10, 2024

Hi Shannon,
There is issue with lucen.net 4.8.0 beta 16, which is high vulnerability:
GHSA-2qw8-ppr5-m96c
It is resolve in beta 17, but beta 17 contains a lot breaking changes, can you look into how many of them we can workaround or fix for it can be only in v4?
https://github.com/apache/lucenenet/releases/tag/Lucene.Net_4_8_0_beta00017

@Shazwazza
Copy link
Owner

It's not really a high vulnerability but either way, you can just update and examine will continue to work

@Shazwazza
Copy link
Owner

I'll ship a new targeted examine version this week

@NijasHameed
Copy link

NijasHameed commented Nov 19, 2024

@Shazwazza So regadless of umbraco or examine version, I can just update this Lucene.Net.Replicator package to Lucene.Net.Replicator --version 4.8.0-beta00017,
FYI: my umbraco version is 13.5.2. and examine is 3.3.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants