mend-for-github-com[bot]
mend-for-github-com[bot]
## CVE-2024-22195 - Medium Severity Vulnerability Vulnerable Library - Jinja2-2.11.3-py2.py3-none-any.whl A very fast and expressive template engine. Library home page: https://files.pythonhosted.org/packages/7e/c2/1eece8c95ddbc9b1aeb64f5783a9e07a286de42191b7204d67b7496ddf35/Jinja2-2.11.3-py2.py3-none-any.whl Path to dependency file: /benchmarks/osb/requirements.txt Path to vulnerable library:...
## CVE-2024-34144 - Medium Severity Vulnerability Vulnerable Library - script-security-1229.v4880b_b_e905a_6.jar Allows Jenkins administrators to control what in-process scripts can be run by less-privileged users. Library home page: https://github.com/ Path to...
### Is your feature request related to a problem? I noticed that each time when I make a request to OpenSearch with this client, it makes an additional request to...
## CVE-2024-34146 - Medium Severity Vulnerability Vulnerable Library - git-server-1.11.jar This library plugin provides embedded Git server capability inside Jenkins Library home page: https://github.com/jenkinsci/git-server-plugin Path to dependency file: /build.gradle Path...
## CVE-2024-22949 - Critical Severity Vulnerability Vulnerable Library - jfreechart-1.0.19.jar JFreeChart is a class library, written in Java, for generating charts. Utilising the Java2D APIs, it currently supports bar charts,...
## CVE-2024-22257 - High Severity Vulnerability Vulnerable Library - spring-security-core-5.8.7.jar Spring Security Library home page: https://spring.io Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.springframework.security/spring-security-core/5.8.7/916c9b391ef6e606806dbe2fc9c8b4ff5a853cdf/spring-security-core-5.8.7.jar Dependency Hierarchy: - jenkins-core-2.426.3.jar...
## CVE-2023-2976 - High Severity Vulnerability Vulnerable Library - guava-31.1-jre.jar Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more....
## CVE-2024-25710 - High Severity Vulnerability Vulnerable Library - commons-compress-1.24.0.jar Apache Commons Compress defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz,...
## CVE-2024-23899 - Medium Severity Vulnerability Vulnerable Library - git-server-1.11.jar This library plugin provides embedded Git server capability inside Jenkins Library home page: https://github.com/jenkinsci/git-server-plugin Path to dependency file: /build.gradle Path...
## CVE-2024-23897 - Critical Severity Vulnerability Vulnerable Library - jenkins-core-2.387.1.jar Path to dependency file: /build.gradle Path to vulnerable library: /home/wss-scanner/.gradle/caches/modules-2/files-2.1/org.jenkins-ci.main/jenkins-core/2.387.1/d60c28351aa7be2fb667188ea5e711edecd9de5b/jenkins-core-2.387.1.jar Dependency Hierarchy: - :x: **jenkins-core-2.387.1.jar** (Vulnerable Library) Found in HEAD...