com.alibaba.otter:canal.deployer (>=1.1.7, <=1.1.8), com.alibaba.otter:canal.instance.core (>=1.1.7, <=1.1.8) +51 more potentially affected by CVE-2021-37137 via org.jboss.netty:netty (3.2.10.final)

org.jboss.netty:netty MAVEN version 3.2.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - com.alibaba.otter:canal.deployer =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =5.0....

com.alibaba.otter:canal.deployer (>=1.1.7, <=1.1.8), com.alibaba.otter:canal.instance.core (>=1.1.7, <=1.1.8) +51 more potentially affected by CVE-2021-21290 +1 more via org.jboss.netty:netty (3.2.10.final)

org.jboss.netty:netty MAVEN version 3.2.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - com.alibaba.otter:canal.deployer =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =5.0....