stocator
stocator copied to clipboard
Upgrade commons-validator library (to get latest commons-beanutils) to fix twistlock issue findings
Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.
Path to vulnerable library: /home/wss-scanner/.ivy2/cache/commons-beanutils/commons-beanutils/jars/commons-beanutils-1.9.2.jar
Dependency Hierarchy:
stocator-1.1.5.jar (Root Library) commons-validator-1.6.jar ❌ commons-beanutils-1.9.2.jar (Vulnerable Library) Found in HEAD commit: 346070213bf476fc63ca8b5d9d7909d4310f32ad
Found in base branch: main
Currently "commons-validator" "1.8.0" is free os vulnerabilities.
@shivangi24 - can you have a check