spring-boot-demo

spring-boot-demo copied to clipboard

Vulnerable Library - spring-boot-starter-web-2.7.3.jar Path to dependency file: /pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-core/9.0.65/tomcat-embed-core-9.0.65.jar Found in HEAD commit: f9c5b88a3d18cef84a8997c01f4fec22923dd942 ## Vulnerabilities | CVE | Severity | CVSS | Dependency |...

mend-for-github-com[bot]

Vulnerable Library - bootstrap-4.1.0.min.js The most popular front-end framework for developing responsive, mobile first projects on the web. Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.1.0/js/bootstrap.min.js Path to dependency file: /src/main/resources/templates/index.html Path to vulnerable...

mend-for-github-com[bot]

Vulnerable Library - jquery-3.3.1.min.js JavaScript library for DOM operations Library home page: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js Path to dependency file: /src/main/resources/templates/index.html Path to vulnerable library: /src/main/resources/templates/index.html Found in HEAD commit: f9c5b88a3d18cef84a8997c01f4fec22923dd942 ## Vulnerabilities...

mend-for-github-com[bot]

Vulnerable Library - json-path-2.6.0.jar Java port of Stefan Goessner JsonPath. Library home page: https://github.com/jayway/JsonPath Path to dependency file: /pom.xml Path to vulnerable library: /tmp/ws-ua_20230410193339_AVOTWS/downloadResource_EUFHST/20230410193450/json-path-2.6.0.jar,/home/wss-scanner/.m2/repository/com/jayway/jsonpath/json-path/2.6.0/json-path-2.6.0.jar ## Vulnerabilities | CVE | Severity...

mend-for-github-com[bot]

Vulnerable Library - spring-boot-starter-thymeleaf-2.7.3.jar Path to dependency file: /pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/org/thymeleaf/thymeleaf/3.0.15.RELEASE/thymeleaf-3.0.15.RELEASE.jar ## Vulnerabilities | CVE | Severity | CVSS | Dependency | Type | Fixed in (spring-boot-starter-thymeleaf...

mend-for-github-com[bot]

Update dependency com.jayway.jsonpath:json-path to v2.9.0 (main)

1

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [com.jayway.jsonpath:json-path](https://togithub.com/jayway/JsonPath) | compile | minor | `2.6.0` -> `2.9.0` | By merging this...

mend-for-github-com[bot]

Bump com.jayway.jsonpath:json-path from 2.6.0 to 2.9.0

1

Bumps [com.jayway.jsonpath:json-path](https://github.com/jayway/JsonPath) from 2.6.0 to 2.9.0. Release notes Sourced from com.jayway.jsonpath:json-path's releases. json-path-2.9.0 What's Changed Fix for CVE-2023-51074. update dependencies by @​SingingBush in json-path/JsonPath#965 JPMS: define Automatic-Module-Name as json.path by...

dependabot[bot]

Vulnerable Library - opentelemetry-exporter-otlp-1.16.0.jar Path to dependency file: /pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/com/squareup/okio/okio/2.8.0/okio-2.8.0.jar Found in HEAD commit: f9c5b88a3d18cef84a8997c01f4fec22923dd942 ## Vulnerabilities | CVE | Severity | CVSS | Dependency |...

mend-for-github-com[bot]

Vulnerable Library - spring-cloud-starter-sleuth-3.1.3.jar Path to dependency file: /pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/org/bouncycastle/bcprov-jdk15on/1.68/bcprov-jdk15on-1.68.jar ## Vulnerabilities | CVE | Severity | CVSS | Dependency | Type | Fixed in (spring-cloud-starter-sleuth...

mend-for-github-com[bot]

Vulnerable Library - temporal-spring-boot-starter-alpha-1.19.1.jar Path to vulnerable library: /home/wss-scanner/.m2/repository/com/google/guava/guava/31.1-jre/guava-31.1-jre.jar ## Vulnerabilities | CVE | Severity | CVSS | Dependency | Type | Fixed in (temporal-spring-boot-starter-alpha version) | Remediation Possible** |...

mend-for-github-com[bot]