Skip to content

Fix Vulnerabilites #306

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 3 commits into
base: main
Choose a base branch
from
Open

Fix Vulnerabilites #306

wants to merge 3 commits into from

Conversation

cx-margarita-levitm
Copy link
Collaborator

Fixed:

  • jdom:jdom-1.1.3
  • springframework:spring-webmvc-5.3.39

@github-actions GitHub Actions
Copy link

Logo
Checkmarx One – Scan Summary & Details – efba11b3-990f-44c9-bb39-eebc31cde204

New Issues (1)

Checkmarx found the following issues in this Pull Request

Severity Issue Source File / Package Checkmarx Insight
HIGH Cx78f40514-81ff Maven-commons-collections:commons-collections-3.2.2
detailsDescription: The framework Apache Commons Collections before 4.3 is vulnerable to Stack Overflow. The function `add()` in the file `list/SetUniqueList.java` thr...
Attack Vector: NETWORK
Attack Complexity: LOW

ID: FDzCaYfhpP%2B7iJXOKw3EktXHaGhVmNkX4SqspW%2FnzVI%3D
Vulnerable Package
Fixed Issues (4)

Great job! The following issues were fixed in this Pull Request

Severity Issue Source File / Package
CRITICAL CVE-2016-1000027 Maven-org.springframework:spring-webmvc-5.3.39
HIGH CVE-2024-38816 Maven-org.springframework:spring-webmvc-5.3.39
HIGH CVE-2024-38819 Maven-org.springframework:spring-webmvc-5.3.39
MEDIUM CVE-2024-38828 Maven-org.springframework:spring-webmvc-5.3.39

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@cx-anurag-dalke cx-anurag-dalke Awaiting requested review from cx-anurag-dalke

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@cx-margarita-levitm