Joe Wragg

CVE-2023-2976 - com.google.guava:guava

6

### Scope pom.xml ### Report Link https://nvd.nist.gov/vuln/detail/CVE-2023-2976 ### Dependency affected guava 30.1.1-jre ### Proposed solution / further info Upgrade your installed software packages to the proposed fixed in version and...

Migration info printed even if using yaml

6

### Is there an existing issue for this? - [X] I have searched the existing issues ### Problem description It seems that the migration info is printed each time I...

Application startup fails org.yaml.snakeyaml.error.YAMLException: java.io.IOException: Is a directory

1

### Is there an existing issue for this? - [X] I have searched the existing issues ### Problem description App startup fails with errors ### Proposed solution Not sure as...

### Scope pom.xml ### Report Link https://avd.aquasec.com/nvd/cve-2024-22259 ### Dependency affected org.springframework:spring-web ### Proposed solution / further info Severity: HIGH Installed version: 6.0.14 Fixed versions: 6.1.5, 6.0.18, 5.3.33 Description: springframework: URL...

### Scope pom.xml ### Report Link https://avd.aquasec.com/nvd/cve-2024-22243 ### Dependency affected org.springframework:spring-web ### Proposed solution / further info Severity: HIGH Installed version: 6.0.14 Fixed versions: 6.1.4, 6.0.17, 5.3.32 Description: springframework: URL...

### Is there an existing issue for this? - [X] I have searched the existing issues ### Problem description If using preperation mode in routing the mapgen should finish and...

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request * Please do...

### Scope pom.xml ### Report Link https://avd.aquasec.com/nvd/cve-2024-36114 ### Dependency affected io.airlift:aircompressor (ors.jar) ### Proposed solution / further info | Library | Vulnerability | Severity | Status | Installed Version |...

Manage PAT tokens through terraform provider

5

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request * Please do...

CVEs found in latest ghcr.io/vroom-project/vroom-docker:v1.14.0

4

**Total: 24 (HIGH: 24, CRITICAL: 0)** | Library | Vulnerability | Severity | Status | Installed Version | Fixed Version | Title | Link | |-----------------|----------------|----------|--------|-------------------|-------------------|--------------------------------------------------------|----------------------------------------------------------------------| | bsdutils | CVE-2024-28085...