奇安信CodeSafe

https://github.com/ctripcorp/dal/blob/b63bc5152bb779eb1c783c4fb244199f4f1aeeaa/pom.xml#L37 CVE-2020-1938 CVE-2019-0232 CVE-2018-8014 CVE-2020-13935 Recommended upgrade version：7.0.106

libathemecore/hook.c line 145 never used variable 'priv' libathemecore/logger.c line 285 never used variable 'c'

https://github.com/google/martian/blob/dacbe1a1813d1e1b8f44f17b03ffe0cd9fb5ba54/cmd/proxy/main.go#L433

https://github.com/yahoo/egads/blob/04d61d4b562763781dac0f2b41d6fdeb782a450f/src/main/java/com/yahoo/egads/models/adm/AdaptiveKernelDensityChangePointDetector.java#L145

https://github.com/yahoo/egads/blob/04d61d4b562763781dac0f2b41d6fdeb782a450f/src/main/java/com/yahoo/egads/Egads.java#L42 The program can potentially fail to release a system resource.

https://github.com/google/exposure-notifications-android/blob/a93e236997943408308e2b750966567ebdb8d3df/build.gradle#L29 CVE-2015-5237 Recommended upgrade version：0.8.13

https://github.com/google/exposure-notifications-android/blob/5eb8e99dc8ef0db4ee4754495d032e27094bcfe9/app/src/main/java/com/google/android/apps/exposurenotification/nearby/DiagnosisKeyFileSubmitter.java#L127 The program can potentially fail to release a file handle.

https://github.com/apache/submarine/blob/3041ef26ad04c0bddd2257a28694aa4e2b4cc837/pom.xml#L100 CVE-2017-18640 Recommended upgrade version： 1.26

https://github.com/apache/submarine/blob/3041ef26ad04c0bddd2257a28694aa4e2b4cc837/pom.xml#L85 CVE-2017-3523 CVE-2018-3258 CVE-2017-3586 Recommended upgrade version： 8.0.20

https://github.com/apache/submarine/blob/3041ef26ad04c0bddd2257a28694aa4e2b4cc837/pom.xml#L72 CVE-2020-27216 Recommended upgrade version： 9.4.35.v20201120