# Update underlying libs

**URL:** <https://forum.opensearch.org/t/update-underlying-libs/16118>\
**Category:** SQL\
**Created:** [October 3, 2023, 10:02am UTC](https://forum.opensearch.org/t/update-underlying-libs/16118 "2023-10-03T10:02:02Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![annvzel](https://avatars.discourse-cdn.com/v4/letter/a/a8b319/32.png) [@annvzel](https://forum.opensearch.org/u/annvzel)\
**Post date:** [October 3, 2023, 10:02am UTC](https://forum.opensearch.org/t/update-underlying-libs/16118/1 "2023-10-03T10:02:02Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):

2.0.8,2.10.0

**Describe the issue** :  
Hi,  
the Druid lib version included (1.0.15) is pretty old.  
Versions of alibaba-druid 1.0.0 - 1.1.19 are reported as vulnerable [https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2019-022\_alibaba-druid.txt](https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2019-022_alibaba-druid.txt)

Is there a plan to update it?

**Configuration** :

**Relevant Logs or Screenshots** :

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/3/33547ea01a5b12dcca2958411d3edd97ae2ea8c1.png) [@system](https://forum.opensearch.org/u/system)\
**Post date:** [December 2, 2023, 10:02am UTC](https://forum.opensearch.org/t/update-underlying-libs/16118/2 "2023-12-02T10:02:07Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.