mend-bolt-for-github[bot]

Results 3422 issues of mend-bolt-for-github[bot]

CVE-2025-1686 (Medium) detected in pebble-3.2.3.jar

## CVE-2025-1686 - Medium Severity Vulnerability Vulnerable Library - pebble-3.2.3.jar Templating engine for Java. Library home page: http://pebbletemplates.io Path to dependency file: /src/test/gatling/gatlingTests.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/io.pebbletemplates/pebble/3.2.3/51ff98f7ea656e636755f3e845147bcfc73fba19/pebble-3.2.3.jar Dependency Hierarchy:...

Mend: dependency security vulnerability
Dev tools vulnerabilty

CVE-2024-57699 (High) detected in json-smart-2.5.1.jar

1 comment

## CVE-2024-57699 - High Severity Vulnerability Vulnerable Library - json-smart-2.5.1.jar JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is...

Mend: dependency security vulnerability
No security fix available

CVE-2024-12798 (Medium) detected in logback-classic-1.5.4.jar, logback-core-1.5.4.jar

## CVE-2024-12798 - Medium Severity Vulnerability Vulnerable Libraries - logback-classic-1.5.4.jar, logback-core-1.5.4.jar logback-classic-1.5.4.jar logback-classic module Library home page: http://www.qos.ch Path to dependency file: /src/test/api/karate/karateTests.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/ch.qos.logback/logback-classic/1.5.4/ddbb8f00855a1a9ef00ea02c4501c2709b2892c3/logback-classic-1.5.4.jar Dependency Hierarchy:...

Mend: dependency security vulnerability
Dev tools vulnerabilty
Wait for parent dependency update

CVE-2024-12801 (Medium) detected in logback-core-1.5.4.jar

## CVE-2024-12801 - Medium Severity Vulnerability Vulnerable Library - logback-core-1.5.4.jar logback-core module Library home page: http://www.qos.ch Path to dependency file: /src/test/api/karate/karateTests.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/ch.qos.logback/logback-core/1.5.4/f57995beb884c0f783e49dac5cd4b8f04ee24b4c/logback-core-1.5.4.jar Dependency Hierarchy: - karate-junit5-1.5.1.jar...

Mend: dependency security vulnerability
Dev tools vulnerabilty
Wait for parent dependency update

microsoft.applicationinsights.aspnetcore.2.21.0.nupkg: 2 vulnerabilities (highest severity is: 8.1)

Vulnerable Library - microsoft.applicationinsights.aspnetcore.2.21.0.nupkg Path to dependency file: /MangoAPI.Presentation/MangoAPI.Presentation.csproj Path to vulnerable library: /home/wss-scanner/.nuget/packages/microsoft.extensions.caching.memory/6.0.1/microsoft.extensions.caching.memory.6.0.1.nupkg Found in HEAD commit: 0c9bb5bd04415d4d387e12646c7ce749fd8ffae2 ## Vulnerabilities | Vulnerability | Severity | CVSS | Dependency |...

Mend: dependency security vulnerability

MangoAPI.Domain-1.0.0: 1 vulnerabilities (highest severity is: 6.8)

Vulnerable Library - MangoAPI.Domain-1.0.0 Path to vulnerable library: /home/wss-scanner/.nuget/packages/microsoft.identitymodel.jsonwebtokens/6.10.0/microsoft.identitymodel.jsonwebtokens.6.10.0.nupkg Found in HEAD commit: 0c9bb5bd04415d4d387e12646c7ce749fd8ffae2 ## Vulnerabilities | Vulnerability | Severity | CVSS | Dependency | Type | Fixed in (MangoAPI.Domain...

Mend: dependency security vulnerability

microsoft.entityframeworkcore.design.6.0.14.nupkg: 1 vulnerabilities (highest severity is: 7.5)

Vulnerable Library - microsoft.entityframeworkcore.design.6.0.14.nupkg Path to dependency file: /MangoAPI.Infrastructure/MangoAPI.Infrastructure.csproj Path to vulnerable library: /home/wss-scanner/.nuget/packages/microsoft.extensions.caching.memory/6.0.1/microsoft.extensions.caching.memory.6.0.1.nupkg Found in HEAD commit: 0c9bb5bd04415d4d387e12646c7ce749fd8ffae2 ## Vulnerabilities | Vulnerability | Severity | CVSS | Dependency |...

Mend: dependency security vulnerability

MangoAPI.DiffieHellmanLibrary-1.0.0: 4 vulnerabilities (highest severity is: 8.7)

Vulnerable Library - MangoAPI.DiffieHellmanLibrary-1.0.0 Path to dependency file: /MangoAPI.DiffieHellmanConsole/MangoAPI.DiffieHellmanConsole.csproj Path to vulnerable library: /home/wss-scanner/.nuget/packages/microsoft.identitymodel.jsonwebtokens/6.10.0/microsoft.identitymodel.jsonwebtokens.6.10.0.nupkg Found in HEAD commit: 0c9bb5bd04415d4d387e12646c7ce749fd8ffae2 ## Vulnerabilities | Vulnerability | Severity | CVSS | Dependency |...

Mend: dependency security vulnerability

microsoft.aspnetcore.authentication.jwtbearer.6.0.14.nupkg: 1 vulnerabilities (highest severity is: 6.8)

Vulnerable Library - microsoft.aspnetcore.authentication.jwtbearer.6.0.14.nupkg Path to dependency file: /MangoAPI.IntegrationTests/MangoAPI.IntegrationTests.csproj Path to vulnerable library: /home/wss-scanner/.nuget/packages/microsoft.identitymodel.jsonwebtokens/6.10.0/microsoft.identitymodel.jsonwebtokens.6.10.0.nupkg Found in HEAD commit: 0c9bb5bd04415d4d387e12646c7ce749fd8ffae2 ## Vulnerabilities | Vulnerability | Severity | CVSS | Dependency |...

Mend: dependency security vulnerability

microsoft.entityframeworkcore.sqlserver.6.0.14.nupkg: 4 vulnerabilities (highest severity is: 8.7)

Vulnerable Library - microsoft.entityframeworkcore.sqlserver.6.0.14.nupkg Path to dependency file: /MangoAPI.IntegrationTests/MangoAPI.IntegrationTests.csproj Path to vulnerable library: /home/wss-scanner/.nuget/packages/microsoft.identitymodel.jsonwebtokens/6.10.0/microsoft.identitymodel.jsonwebtokens.6.10.0.nupkg Found in HEAD commit: 0c9bb5bd04415d4d387e12646c7ce749fd8ffae2 ## Vulnerabilities | Vulnerability | Severity | CVSS | Dependency |...

Mend: dependency security vulnerability