Mend for GitHub.com / WhiteSource Security Check
failed
Dec 19, 2023 in 3m 18s
Security Report
The Security Check found 2 vulnerabilities.
CVE | Severity | CVSS Score | Vulnerable Library | Suggested Fix | Issue |
---|---|---|---|---|---|
CVE-2023-6481Path to dependency file: /build.gradle Path to vulnerable library: /home/wss-scanner/.gradle/caches/modules-2/files-2.1/ch.qos.logback/logback-core/1.2.9/cdaca0cf922c5791a8efa0063ec714ca974affe3/logback-core-1.2.9.jar Dependency Hierarchy: -> ktlint-0.45.1.jar (Root Library) -> logback-classic-1.2.9.jar -> ❌ logback-core-1.2.9.jar (Vulnerable Library) |
High | 7.5 | logback-core-1.2.9.jar | Upgrade to version: ch.qos.logback:logback-core:1.2.13,1.3.14,1.4.14 | #1059 |
CVE-2023-6378Path to dependency file: /build.gradle Path to vulnerable library: /home/wss-scanner/.gradle/caches/modules-2/files-2.1/ch.qos.logback/logback-classic/1.2.9/7d495522b08a9a66084bf417e70eedf95ef706bc/logback-classic-1.2.9.jar Dependency Hierarchy: -> ktlint-0.45.1.jar (Root Library) -> ❌ logback-classic-1.2.9.jar (Vulnerable Library) |
High | 7.5 | logback-classic-1.2.9.jar | Upgrade to version: ch.qos.logback:logback-classic:1.3.12,1.4.12 | #1060 |
Total libraries scanned: 190
Scan token: ee5bcfc5f4d043f295aefccc60b37eb2
Loading