Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Clean Vulnerabilities #269

Merged
merged 13 commits into from
Jan 6, 2025
Merged

Clean Vulnerabilities #269

merged 13 commits into from
Jan 6, 2025

Conversation

miryamfoiferCX
Copy link
Contributor

No description provided.

@github-actions GitHub Actions
Copy link

github-actions bot commented Jan 2, 2025 •
edited
Loading

Logo
Checkmarx One – Scan Summary & Details – b517bacb-03eb-4de4-a5c7-8bcdd6bd785b

Fixed Issues

Severity Issue Source File / Package
CRITICAL Cxa9261daf-3755 Maven-org.bouncycastle:bcprov-jdk15on-1.64
HIGH CVE-2022-34169 Maven-xalan:xalan-2.7.2
HIGH CVE-2023-2976 Maven-com.google.guava:guava-31.1-android
HIGH Cx78f40514-81ff Maven-commons-collections:commons-collections-3.2.2
HIGH Cx8fd408ac-dd80 Maven-com.beust:jcommander-1.72
MEDIUM CVE-2012-5783 Maven-commons-httpclient:commons-httpclient-3.1
MEDIUM CVE-2012-6153 Maven-commons-httpclient:commons-httpclient-3.1
MEDIUM CVE-2020-15522 Maven-org.bouncycastle:bcprov-jdk15on-1.64
MEDIUM CVE-2020-1945 Maven-org.apache.ant:ant-1.10.3
MEDIUM CVE-2021-36373 Maven-org.apache.ant:ant-1.10.3
MEDIUM CVE-2021-36374 Maven-org.apache.ant:ant-1.10.3
MEDIUM CVE-2023-33201 Maven-org.bouncycastle:bcprov-jdk15on-1.64
MEDIUM CVE-2023-33201 Maven-org.bouncycastle:bcprov-jdk18on-1.72
MEDIUM CVE-2023-33202 Maven-org.bouncycastle:bcprov-jdk15on-1.64
MEDIUM CVE-2023-33202 Maven-org.bouncycastle:bcprov-jdk18on-1.72
MEDIUM CVE-2024-29857 Maven-org.bouncycastle:bcprov-jdk15on-1.64
MEDIUM CVE-2024-29857 Maven-org.bouncycastle:bcprov-jdk18on-1.72
MEDIUM CVE-2024-30171 Maven-org.bouncycastle:bcprov-jdk18on-1.72
MEDIUM CVE-2024-30171 Maven-org.bouncycastle:bcprov-jdk15on-1.64
MEDIUM CVE-2024-30172 Maven-org.bouncycastle:bcprov-jdk18on-1.72
MEDIUM CVE-2024-30172 Maven-org.bouncycastle:bcpkix-jdk18on-1.72
MEDIUM CVE-2024-30172 Maven-org.bouncycastle:bcprov-jdk15on-1.64
MEDIUM CVE-2024-38827 Maven-org.springframework.security:spring-security-crypto-5.8.15
MEDIUM CVE-2024-38827 Maven-org.springframework.security:spring-security-core-5.8.15
MEDIUM CVE-2024-38827 Maven-org.springframework.security:spring-security-web-5.8.15
MEDIUM CVE-2024-38827 Maven-org.springframework.security:spring-security-config-5.8.15
MEDIUM CVE-2024-38829 Maven-org.springframework.ldap:spring-ldap-core-2.4.1
LOW CVE-2020-8908 Maven-com.google.guava:guava-31.1-android

@miryamfoiferCX miryamfoiferCX marked this pull request as ready for review January 2, 2025 15:05
@miryamfoiferCX miryamfoiferCX changed the title add dependencyManagement and upgrade java version to 17 Clean Vulnerabilities Jan 6, 2025
greensd4
greensd4 reviewed Jan 6, 2025
View reviewed changes
pom.xml Show resolved Hide resolved
@miryamfoiferCX miryamfoiferCX merged commit 81e1239 into main Jan 6, 2025
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@AlvoBen AlvoBen AlvoBen approved these changes

@greensd4 greensd4 greensd4 approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@miryamfoiferCX @greensd4 @AlvoBen