PyPI/apache-bookkeeper-client CVE-2022-32531: medium 5.9, EPSS 1.09%
The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves
Action: Upgrade apache-bookkeeper-client to 4.14.6 or later.
pip install apache-bookkeeper-client==4.14.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.14.6 | - |
Fixed versions
| 4.14.6 |
Sources
CVE-2022-32531 · published · modified · JSON