HelenParr

[BUG]Vulnerable shared libraries might make azure-communication-calling vulnerable. Can you help upgrade to patch versions?

1

Hi, @anuchandy , @vcolin7, I'd like to report a vulnerability issue in **com.azure.android:azure-communication-calling:2.1.0-beta.1**. ### Issue Description **com.azure.android:azure-communication-calling:2.1.0-beta.1** directly or transitively depends on ***23*** C libraries (.so) cross many platforms(such as...

Hi, @jiangguilong2000 , I'd like to report a vulnerability issue in **io.gamioo:gamioo-compress:0.2.9**. ### Issue Description I noticed that **io.gamioo:gamioo-compress:0.2.9** directly depends on **com.github.luben:zstd-jni:v1.4.5-6** in the [pom](https://repo1.maven.org/maven2/io/gamioo/gamioo-compress/0.2.9/gamioo-compress-0.2.9.pom). However, as shown in...

Hi, @sxychenjing , @Summer500 , I'd like to report a vulnerability issue in **com.didiglobal.chameleon:weexbridge:0.0.13.9**. ### Issue Description **com.didiglobal.chameleon:weexbridge:0.0.13.9** depends on ***2*** C libraries (.so). However, I noticed that one C...

Potential security vulnerability in the zstd C library.

1

Hi, @tupol , I'd like to report a vulnerable dependency in **org.tupol:spark-utils-io_2.12:0.6.2**. ### Issue Description I noticed that **org.tupol:spark-utils-io_2.12:0.6.2** directly depends on **org.apache.spark:spark-core_2.12:3.0.1** in the [pom](https://repo1.maven.org/maven2/org/tupol/spark-utils-io_2.12/0.6.2/spark-utils-io_2.12-0.6.2.pom). However, as shown in...

Hi, @ferortega , @jesusmayor , I'd like to report a vulnerability issue in **es.upm.etsisi:cf4j:2.2.7**. ### Issue Description **es.upm.etsisi:cf4j:2.2.7** directly or transitively depends on ***639*** C libraries (.so) cross many platforms(such...

Could you help upgrade the vulnerble dependency in spark-netflow?

1

Hi, @sadikovi , I'd like to report a vulnerable dependency in **com.github.sadikovi:spark-netflow_2.12:2.1.0**. ### Issue Description I noticed that **com.github.sadikovi:spark-netflow_2.12:2.1.0** directly depends on **org.apache.spark:spark-core_2.12:3.0.1** in the [pom](https://repo1.maven.org/maven2/com/github/sadikovi/spark-netflow_2.12/2.1.0/spark-netflow_2.12-2.1.0.pom). However, as shown in...

Hi, @olir ,I'd like to report a vulnerability issue in **de.serviceflow.frankenstein.plugin.jogamp:distribution_0.3.6**. ### Issue Description **de.serviceflow.frankenstein.plugin.jogamp:distribution_0.3.6** directly or transitively depends on ***26*** C libraries (.so) cross many platforms(such as x86-64, x86,...

Vulnerable shared library might make fresco vulnerable. Can you help upgrade to patch versions?

1

Hi, @oprisnik , @defHLT , I'd like to report a vulnerability issue in **com.facebook.fresco:webpsupport:2.6.0**. ### Issue Description **com.facebook.fresco:webpsupport:2.6.0** directly depends on ***4*** C libraries (.so) cross many platforms(such as x86-64,...

Hi, @jdpxiaoming , I'd like to report a vulnerability issue in **io.github.jdpxiaoming:ijkplayer-arm64:0.0.26**. ### Issue Description **io.github.jdpxiaoming:ijkplayer-arm64:0.0.26** directly or transitively depends on ***3*** C libraries (.so). However, I noticed that one...

Hi, @ionut-damian , @vchernobyl , I'd like to report a vulnerability issue in **com.github.hcmlab:libssj:0.7.6**. ### Issue Description **com.github.hcmlab:libssj:0.7.6** directly or transitively depends on ***102*** C libraries (.so) cross many platforms(such...