Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 6 vulnerabilities #366

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

fix: pom.xml to reduce vulnerabilities

506b031
Select commit
Loading
Failed to load commit list.
Open

[Snyk] Fix for 6 vulnerabilities #366

fix: pom.xml to reduce vulnerabilities
506b031
Select commit
Loading
Failed to load commit list.
Mend Bolt for GitHub / WhiteSource Security Check failed Nov 20, 2024 in 1m 50s

Security Report

You have successfully remediated 3 vulnerabilities, but introduced 1 new vulnerabilities in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
CVE-2016-7103

Vulnerable Source Files:

❌ /src/main/resources/static/components/angular-ui/test/lib/jquery/jquery-ui-1.8.18.js

 Medium 6.1 librejslibrejs-5.0 Upgrade to version: katello - 4.7.2 #134

✔️ Remediated vulnerabilities:

CVE Vulnerable Library
CVE-2024-38816 spring-webmvc-5.3.39.jar
CVE-2016-1000027 spring-web-5.3.38.jar
CVE-2024-38819 spring-webmvc-5.3.39.jar

Base branch total remaining vulnerabilities: 54
Base branch commit: a7f1d7c8847a948156fd4ef3adcd08e7ee28d718


Total libraries scanned: 233

Scan token: 61fed2cc1ee746e9a4a99004e7d10a4d

View more details on Mend Bolt for GitHub