Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update CI to use jdk-21 #599

Merged
merged 2 commits into from
Dec 26, 2023

Upgrade spotless and apply

11fabde
Select commit
Loading
Failed to load commit list.
Merged

Update CI to use jdk-21 #599

Upgrade spotless and apply
11fabde
Select commit
Loading
Failed to load commit list.
Mend for GitHub.com / WhiteSource Security Check failed Dec 21, 2023 in 2m 41s

Security Report

2 new vulnerabilities were introduced in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
CVE-2023-2976

Path to dependency file: /build.gradle

Path to vulnerable library: /home/wss-scanner/.gradle/caches/modules-2/files-2.1/com.google.guava/guava/31.1-jre/60458f877d055d0c9114d9e1a2efb737b4bc282c/guava-31.1-jre.jar

Dependency Hierarchy:

-> google-java-format-1.17.0.jar (Root Library)

   -> ❌ guava-31.1-jre.jar (Vulnerable Library)

High 7.1 guava-31.1-jre.jar Upgrade to version: com.google.guava:guava:32.0.1-android,32.0.1-jre None
CVE-2023-4218

Path to dependency file: /build.gradle

Path to vulnerable library: /home/wss-scanner/.gradle/caches/modules-2/files-2.1/org.eclipse.platform/org.eclipse.core.runtime/3.26.100/83c77ee0cfc948ea33f5054dda3f5c39250a7ed5/org.eclipse.core.runtime-3.26.100.jar

Dependency Hierarchy:

-> ❌ org.eclipse.core.runtime-3.26.100.jar (Vulnerable Library)

Medium 5.0 org.eclipse.core.runtime-3.26.100.jar Upgrade to version: org.eclipse.core.runtime:3.29.0 None

Base branch total remaining vulnerabilities: 0
Base branch commit: 70f67518cd4afc61970107f97e7f5207caddc607


Total libraries scanned: 121

Scan token: 1a1223c167054602bc24525bf86a04b2

View more details on Mend for GitHub.com