HelenParr

Hi, @winniexuwen , @yunxinusecase , I'd like to report a vulnerability issue in **com.netease.nimlib.flutter:nrtc:8.6.5**. ### Issue Description **com.netease.nimlib.flutter:nrtc:8.6.5** directly or transitively depends on ***12*** C libraries (.so) cross many platforms(such...

Potential secutiry vulnerabilities in the shared library which J2V8 depends on. Can you help upgrade to patch versions?

1

Hi, @irbull , @drywolf , I'd like to report a vulnerability issue in **com.eclipsesource.j2v8:j2v8:linux_x86_64_4.8.0**. ### Issue Description **com.eclipsesource.j2v8:j2v8:linux_x86_64_4.8.0** depends on ***1*** C library(.so). However, I noticed that the C library...

Hi, @kaikreuzer , @laverman , I'd like to report a vulnerability issue in **org.eclipse.hawkbit:hawkbit-update-server-azure:0.3.0M7**. ### Issue Description **org.eclipse.hawkbit:hawkbit-update-server-azure:0.3.0M7** directly or transitively depends on ***28*** C libraries (.so) cross many platforms(such...

Hi, @HeartSaVioR , @redsk , I'd like to report a vulnerable dependency in **net.heartsavior.spark:spark-state-tools_2.12:0.5.0-spark-3.0**. ### Issue Description I noticed that **net.heartsavior.spark:spark-state-tools_2.12:0.5.0-spark-3.0** directly depends on **org.apache.spark:spark-core_2.12:3.0.0** in the [pom](https://repo1.maven.org/maven2/net/heartsavior/spark/spark-state-tools_2.12/0.5.0-spark-3.0/spark-state-tools_2.12-0.5.0-spark-3.0.pom). However, as...

Potential secutiry vulnerabilities in the shared libraries which jctp depends on.

1

Hi, @RationalityFrontline , I'd like to report a vulnerability issue in **org.rationalityfrontline:jctp:6.3.19-1.0.0**. ### Issue Description **org.rationalityfrontline:jctp:6.3.19-1.0.0** depends on ***3*** C libraries (.so). However, I noticed that one C library is...

Potential secutiry vulnerability in the shared library zstd. Can you help upgrade to patch versions?

2

Hi, @erikerlandson , @JonathanTaws , I'd like to report a vulnerable dependency in **org.isarnproject:isarn-sketches-spark_2.12:0.5.2-sp3.0**. ### Issue Description I noticed that **org.isarnproject:isarn-sketches-spark_2.12:0.5.2-sp3.0** directly depends on **org.apache.spark:spark-core_2.12:3.0.1** in the [pom](https://repo1.maven.org/maven2/org/isarnproject/isarn-sketches-spark_2.12/0.5.2-sp3.0/isarn-sketches-spark_2.12-0.5.2-sp3.0.pom). However, as...

Hi, @nicolobidotti, @andr3a87, I'd like to report a vulnerability issue in **it.agilelab:wasp-model_2.11:2.28.1-cdp717**. ### Issue Description I noticed that **it.agilelab:wasp-model_2.11:2.28.1-cdp717** directly depends on **com.github.luben:zstd-jni:v1.4.3-1** in the [pom](https://repo1.maven.org/maven2/it/agilelab/wasp-model_2.11/2.28.1-cdp717/wasp-model_2.11-2.28.1-cdp717.pom). However, as shown in...

Hi, @mbnakaya , @caiogaspar , I'd like to report a vulnerability issue in **br.com.moip:mpos-sdk:7.0.1**. ### Issue Description **br.com.moip:mpos-sdk:7.0.1** directly or transitively depends on ***20*** C libraries (.so) cross many platforms(such...

Vulnerable shared libraries might make 180protocol vulnerable. Can you help upgrade to patch versions?

1

Hi, @parthbond180 , @hiteshvpatel256 , I'd like to report a vulnerability issue in **com.protocol180:protocol-aggregator-workflows:0.1.4**. ### Issue Description **com.protocol180:protocol-aggregator-workflows:0.1.4** directly or transitively depends on ***4*** C libraries (.so). However, I noticed...

Potential secutiry vulnerabilities in the shared library which APE depends on. Can you help upgrade to patch versions?

1

Hi, @vedran-kasalica , @KoenHav , I'd like to report a vulnerability issue in **io.github.sanctuuary:APE:1.1.12**. ### Issue Description **io.github.sanctuuary:APE:1.1.12** directly depends on ***1*** C library(.so). However, I noticed that the C...