mend-for-github-com[bot]

## CVE-2019-5413 - High Severity Vulnerability Vulnerable Library - morgan-1.6.1.tgz HTTP request logger middleware for node.js Library home page: https://registry.npmjs.org/morgan/-/morgan-1.6.1.tgz Path to dependency file: /samples/dynamic-html/package.json Path to vulnerable library: /samples/dynamic-html/node_modules/morgan/package.json...

CVE-2017-1000048 (High) detected in qs-4.0.0.tgz

2

## CVE-2017-1000048 - High Severity Vulnerability Vulnerable Library - qs-4.0.0.tgz A querystring parser that supports nesting and arrays, with a depth limit Library home page: https://registry.npmjs.org/qs/-/qs-4.0.0.tgz Path to dependency file:...

## CVE-2017-7525 - High Severity Vulnerability Vulnerable Libraries - jackson-databind-2.7.2.jar, jackson-databind-2.6.4.jar, jackson-databind-2.7.8.jar, jackson-databind-2.7.5.jar jackson-databind-2.7.2.jar General data-binding functionality for Jackson: works on core streaming API Library home page: http://github.com/FasterXML/jackson Path to...

## CVE-2017-18640 - High Severity Vulnerability Vulnerable Libraries - snakeyaml-1.12.jar, snakeyaml-1.16.jar, snakeyaml-1.15.jar snakeyaml-1.12.jar YAML 1.1 parser and emitter for Java Library home page: http://www.snakeyaml.org Path to dependency file: /samples/client/petstore-security-test/scala/build.gradle Path...

## CVE-2020-10673 - High Severity Vulnerability Vulnerable Libraries - jackson-databind-2.8.9.jar, jackson-databind-2.7.8.jar, jackson-databind-2.7.2.jar, jackson-databind-2.7.5.jar, jackson-databind-2.6.4.jar jackson-databind-2.8.9.jar General data-binding functionality for Jackson: works on core streaming API Library home page: http://github.com/FasterXML/jackson Path...

## CVE-2020-10672 - High Severity Vulnerability Vulnerable Libraries - jackson-databind-2.6.4.jar, jackson-databind-2.7.5.jar, jackson-databind-2.8.9.jar, jackson-databind-2.7.2.jar, jackson-databind-2.7.8.jar jackson-databind-2.6.4.jar General data-binding functionality for Jackson: works on core streaming API Library home page: http://github.com/FasterXML/jackson Path...

## CVE-2020-9548 - High Severity Vulnerability Vulnerable Libraries - jackson-databind-2.6.4.jar, jackson-databind-2.8.9.jar, jackson-databind-2.7.5.jar, jackson-databind-2.7.2.jar, jackson-databind-2.7.8.jar jackson-databind-2.6.4.jar General data-binding functionality for Jackson: works on core streaming API Library home page: http://github.com/FasterXML/jackson Path...

## CVE-2020-9547 - High Severity Vulnerability Vulnerable Libraries - jackson-databind-2.4.5.jar, jackson-databind-2.6.4.jar jackson-databind-2.4.5.jar General data-binding functionality for Jackson: works on core streaming API Library home page: http://github.com/FasterXML/jackson Path to dependency file:...

## CVE-2020-9546 - High Severity Vulnerability Vulnerable Libraries - jackson-databind-2.6.4.jar, jackson-databind-2.7.8.jar, jackson-databind-2.7.5.jar, jackson-databind-2.7.2.jar, jackson-databind-2.8.9.jar jackson-databind-2.6.4.jar General data-binding functionality for Jackson: works on core streaming API Library home page: http://github.com/FasterXML/jackson Path...

## WS-2021-0419 - High Severity Vulnerability Vulnerable Libraries - gson-2.3.1.jar, gson-2.7.jar, gson-2.8.1.jar, gson-2.8.5.jar gson-2.3.1.jar Google Gson library Library home page: http://code.google.com/p/google-gson/ Path to dependency file: /samples/client/petstore/java/retrofit/build.gradle Path to vulnerable library:...