Update dependency eslint to v7 #345
Security Report
You have successfully remediated 126 vulnerabilities, but introduced 92 new vulnerabilities in this branch.
❌ New vulnerabilities:
Partial results (77 vulnerabilities) are displayed below due to a content size limitation in GitHub. To view information on the remaining vulnerabilities, navigate to the Mend Application.
CVE | Severity | CVSS Score | Vulnerable Library | Suggested Fix | Issue |
---|---|---|---|---|---|
CVE-2018-14721Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 10.0 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.7,2.8.11.3,2.7.9.5,2.6.7.3 | #81 |
CVE-2020-9548Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.7.9.7,2.8.11.6,2.9.10.4 | #128 |
CVE-2020-9547Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.10.3 | #127 |
CVE-2020-9546Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.10.3 | #124 |
CVE-2020-8840Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.3 | #106 |
CVE-2020-10683Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> hibernate-core-3.6.3.Final.jar (Root Library) -> ❌ dom4j-1.6.1.jar (Vulnerable Library) |
Critical | 9.8 | dom4j-1.6.1.jar | Upgrade to version: org.dom4j:dom4j:2.1.3,org.dom4j:dom4j:2.0.3 | None |
CVE-2019-20330Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.7.9.7,2.8.11.5,2.9.10.2 | #129 |
CVE-2019-17531Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.10 | #77 |
CVE-2019-17267Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.8.11.5,2.9.10 | #86 |
CVE-2019-16943Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.6.7.3,2.7.9.7,2.8.11.5,2.9.10.1 | #107 |
CVE-2019-16942Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.6.7.3,2.7.9.7,2.8.11.5,2.9.10.1 | #105 |
CVE-2019-16335Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.9.10 | #84 |
CVE-2019-14893Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.10.0 | #121 |
CVE-2019-14892Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.6.7.3,2.7.9.7,2.8.11.5,2.9.10 | #123 |
CVE-2019-14540Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.8.11.5,2.9.10,2.10.0.pr3,2.11.0.rc1 | #75 |
CVE-2019-14379Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.9.9.2 | #126 |
CVE-2019-13116Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> hibernate-core-3.6.3.Final.jar (Root Library) -> ❌ commons-collections-3.1.jar (Vulnerable Library) |
Critical | 9.8 | commons-collections-3.1.jar | Upgrade to version: commons-collections:commons-collections:3.2.2 | None |
CVE-2019-10202Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.0.0 | #111 |
CVE-2018-7489Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.8.11.1,2.9.5 | #136 |
CVE-2018-19360Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.7.9.5,2.8.11.3,2.9.8,2.10.0.pr1 | #110 |
CVE-2018-14720Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.9.7 | #79 |
CVE-2018-14719Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.9.7 | #130 |
CVE-2018-14718Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.9.7 | #131 |
CVE-2018-11307Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: jackson-databind-2.9.6 | #92 |
CVE-2017-17485Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.9.4 | #125 |
CVE-2017-15708Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> hibernate-core-3.6.3.Final.jar (Root Library) -> ❌ commons-collections-3.1.jar (Vulnerable Library) |
Critical | 9.8 | commons-collections-3.1.jar | Upgrade to version: org.apache.synapse:Apache-Synapse:3.0.1;commons-collections:commons-collections:3.2.2 | None |
CVE-2017-15095Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
Critical | 9.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.8.10,2.9.1 | #78 |
CVE-2015-7501Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> hibernate-core-3.6.3.Final.jar (Root Library) -> ❌ commons-collections-3.1.jar (Vulnerable Library) |
Critical | 9.8 | commons-collections-3.1.jar | Upgrade to version: commons-collections:commons-collections:3.2.2;org.apache.commons:commons-collections4:4.1 | None |
CVE-2015-4852Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> hibernate-core-3.6.3.Final.jar (Root Library) -> ❌ commons-collections-3.1.jar (Vulnerable Library) |
Critical | 9.8 | commons-collections-3.1.jar | Upgrade to version: commons-collections:commons-collections:3.2.2 | None |
CVE-2020-11113Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.4;2.10.0 | #115 |
CVE-2020-11112Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.4,2.10.0 | #116 |
CVE-2020-11111Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.4,2.10.0 | #113 |
CVE-2020-10969Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.8.11.6;com.fasterxml.jackson.core:jackson-databind:2.7.9.7 | #90 |
CVE-2020-10968Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: jackson-databind-2.9.10.4 | #89 |
CVE-2020-10673Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.4 | #133 |
CVE-2020-10672Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.8 | jackson-databind-2.6.7.1.jar | Upgrade to version: jackson-databind-2.9.10.4 | #132 |
CVE-2017-3523Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ mysql-connector-java-5.1.14.jar (Vulnerable Library) |
High | 8.5 | mysql-connector-java-5.1.14.jar | Upgrade to version: mysql:mysql-connector-java:5.1.41 | #36 |
CVE-2023-22102Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ mysql-connector-java-5.1.14.jar (Vulnerable Library) |
High | 8.3 | mysql-connector-java-5.1.14.jar | Upgrade to version: com.mysql:mysql-connector-j:8.2.0 | None |
CVE-2021-20190Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind-2.9.10.7 | #112 |
CVE-2020-36189Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.8 | #91 |
CVE-2020-36188Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.8 | #93 |
CVE-2020-36187Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.8 | #102 |
CVE-2020-36186Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.8 | #103 |
CVE-2020-36185Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.8 | #100 |
CVE-2020-36184Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.8 | #101 |
CVE-2020-36183Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.8 | #97 |
CVE-2020-36182Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.8 | #98 |
CVE-2020-36181Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.8 | #95 |
CVE-2020-36180Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.8 | #96 |
CVE-2020-36179Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.8 | #114 |
CVE-2020-24750Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.6 | #122 |
CVE-2020-24616Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.9.10.6 | #117 |
CVE-2020-14195Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.5 | #134 |
CVE-2020-14062Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.10.0 | #120 |
CVE-2020-14061Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.10.0 | #119 |
CVE-2020-14060Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.10.0 | #118 |
CVE-2020-11620Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.4 | #94 |
CVE-2020-11619Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.4 | #85 |
CVE-2020-10650Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.9.10.4 | None |
CVE-2018-5968Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 8.1 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.8.11.1, 2.9.4 | #99 |
CVE-2024-21490Path to dependency file: /package.json Path to vulnerable library: /node_modules/angular/package.json Dependency Hierarchy: -> ❌ angular-1.8.3.tgz (Vulnerable Library) |
High | 7.5 | angular-1.8.3.tgz | #341 | |
CVE-2022-42004Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 7.5 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.13.4 | None |
CVE-2022-42003Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 7.5 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.12.7.1,2.13.4.1 | None |
CVE-2022-25844Path to dependency file: /package.json Path to vulnerable library: /node_modules/angular/package.json Dependency Hierarchy: -> ❌ angular-1.8.3.tgz (Vulnerable Library) |
High | 7.5 | angular-1.8.3.tgz | #274 | |
CVE-2020-36518Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 7.5 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.12.6.1,2.13.2.1 | #247 |
CVE-2020-25649Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 7.5 | jackson-databind-2.6.7.1.jar | Upgrade to version: com.fasterxml.jackson.core:jackson-databind:2.6.7.4,2.9.10.7,2.10.5.1,2.11.0.rc1 | #80 |
CVE-2019-14439Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 7.5 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.9.9.2 | #87 |
CVE-2019-12086Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 7.5 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.9.9 | #76 |
CVE-2018-12023Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 7.5 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.7.9.4, 2.8.11.2, 2.9.6 | #83 |
CVE-2018-12022Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ jackson-databind-2.6.7.1.jar (Vulnerable Library) |
High | 7.5 | jackson-databind-2.6.7.1.jar | Upgrade to version: 2.7.9.4, 2.8.11.2, 2.9.6 | #82 |
CVE-2018-1000632Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> hibernate-core-3.6.3.Final.jar (Root Library) -> ❌ dom4j-1.6.1.jar (Vulnerable Library) |
High | 7.5 | dom4j-1.6.1.jar | Upgrade to version: org.dom4j:dom4j:2.0.3 | None |
CVE-2020-25638Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ hibernate-core-3.6.3.Final.jar (Vulnerable Library) |
High | 7.4 | hibernate-core-3.6.3.Final.jar | Upgrade to version: org.hibernate:hibernate-core:5.3.20.Final,5.4.24.Final | #135 |
CVE-2015-6420Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> hibernate-core-3.6.3.Final.jar (Root Library) -> ❌ commons-collections-3.1.jar (Vulnerable Library) |
High | 7.3 | commons-collections-3.1.jar | Upgrade to version: commons-collections:commons-collections3.2.2,org.apache.commons:commons-collections4:4.1 | None |
CVE-2022-21363Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ mysql-connector-java-5.1.14.jar (Vulnerable Library) |
Medium | 6.6 | mysql-connector-java-5.1.14.jar | Upgrade to version: mysql:mysql-connector-java:8.0.28 | None |
CVE-2019-14900Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ hibernate-core-3.6.3.Final.jar (Vulnerable Library) |
Medium | 6.5 | hibernate-core-3.6.3.Final.jar | Upgrade to version: org.hibernate:hibernate-core:5.4.18.Final | #42 |
CVE-2017-3586Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ mysql-connector-java-5.1.14.jar (Vulnerable Library) |
Medium | 6.4 | mysql-connector-java-5.1.14.jar | Upgrade to version: 5.1.42 | #37 |
CVE-2022-25869Path to dependency file: /package.json Path to vulnerable library: /node_modules/angular/package.json Dependency Hierarchy: -> ❌ angular-1.8.3.tgz (Vulnerable Library) |
Medium | 6.1 | angular-1.8.3.tgz | #273 |
✔️ Remediated vulnerabilities:
CVE | Vulnerable Library |
---|---|
CVE-2022-2421 | socket.io-parser-3.2.0.tgz |
CVE-2022-37598 | uglify-js-3.4.10.tgz |
CVE-2018-20190 | node-sass-v4.14.1 |
CVE-2017-16137 | debug-4.2.0.tgz |
CVE-2022-1537 | grunt-1.3.0.tgz |
CVE-2018-11698 | opennms-opennms-source-22.0.1-1 |
CVE-2022-33987 | got-11.4.0.tgz |
CVE-2018-11694 | node-sass-v4.14.1 |
CVE-2021-23490 | parse-link-header-1.0.1.tgz |
CVE-2022-25869 | angular-1.8.0.tgz |
CVE-2021-3807 | ansi-regex-4.1.0.tgz |
CVE-2018-19838 | opennms-opennms-source-22.0.1-1 |
CVE-2022-22984 | snyk-sbt-plugin-2.11.0.tgz |
CVE-2019-6286 | opennms-opennms-source-22.0.1-1 |
CVE-2022-25901 | cookiejar-2.1.2.tgz |
WS-2018-0625 | xmlbuilder-8.2.2.tgz |
CVE-2020-7788 | ini-1.3.5.tgz |
CVE-2021-44906 | minimist-0.0.10.tgz |
CVE-2022-0536 | follow-redirects-1.13.0.tgz |
CVE-2024-21490 | angular-1.8.0.tgz |
CVE-2018-20821 | node-sass-v4.14.1 |
CVE-2023-0842 | xml2js-0.4.23.tgz |
CVE-2021-3918 | json-schema-0.2.3.tgz |
CVE-2020-28481 | socket.io-2.1.1.tgz |
CVE-2021-23413 | jszip-3.5.0.tgz |
WS-2019-0425 | mocha-5.2.0.tgz |
CVE-2022-24999 | qs-6.5.2.tgz |
CVE-2022-26592 | node-sass-v4.14.1 |
CVE-2021-23406 | degenerator-1.0.4.tgz |
CVE-2023-26117 | angular-1.8.0.tgz |
CVE-2021-43138 | async-2.6.3.tgz |
CVE-2022-0155 | follow-redirects-1.13.0.tgz |
WS-2021-0153 | ejs-2.5.9.tgz |
CVE-2018-11697 | node-sass-v4.14.1 |
CVE-2022-25883 | semver-5.7.1.tgz |
CVE-2018-11694 | opennms-opennms-source-24.1.2-1 |
CVE-2021-23343 | path-parse-1.0.6.tgz |
CVE-2021-43138 | async-3.2.0.tgz |
CVE-2020-11023 | jquery-1.8.1.min.js |
CVE-2019-6284 | opennms-opennms-source-22.0.1-1 |
CVE-2021-33502 | normalize-url-4.5.0.tgz |
CVE-2023-45133 | babel-traverse-6.26.0.tgz |
CVE-2020-36049 | socket.io-parser-3.2.0.tgz |
CVE-2018-19827 | opennms-opennms-source-24.1.2-1 |
CVE-2018-20190 | opennms-opennms-source-24.1.2-1 |
CVE-2021-23495 | karma-3.1.4.tgz |
CVE-2021-23362 | hosted-git-info-3.0.5.tgz |
CVE-2020-7598 | minimist-0.0.10.tgz |
CVE-2020-28282 | getobject-0.1.0.tgz |
WS-2021-0638 | mocha-5.2.0.tgz |
CVE-2022-24999 | qs-6.7.0.tgz |
CVE-2022-25844 | angular-1.8.0.tgz |
CVE-2020-11022 | jquery-1.8.1.min.js |
CVE-2018-11697 | CSS::Sass-v3.4.11 |
CVE-2021-44906 | minimist-1.2.5.tgz |
CVE-2020-11023 | jquery-3.2.1.min.js |
CVE-2022-25881 | http-cache-semantics-4.1.0.tgz |
CVE-2020-28481 | socket.io-2.3.0.tgz |
CVE-2021-23369 | handlebars-4.7.6.tgz |
WS-2019-0605 | CSS::Sass-v3.4.11 |
CVE-2020-36048 | engine.io-3.4.2.tgz |
CVE-2018-19839 | CSS::Sass-v3.4.11 |
CVE-2022-22984 | snyk-1.406.0.tgz |
CVE-2018-19826 | node-sass-v4.14.1 |
CVE-2021-41580 | passport-oauth2-1.5.0.tgz |
CVE-2020-36049 | socket.io-parser-3.3.1.tgz |
CVE-2023-48795 | ssh2-0.8.9.tgz |
CVE-2020-7598 | minimist-1.2.0.tgz |
CVE-2022-46175 | json5-0.5.1.tgz |
CVE-2018-20821 | opennms-opennms-source-24.1.2-1 |
CVE-2022-24441 | snyk-1.406.0.tgz |
CVE-2021-23406 | pac-resolver-3.0.0.tgz |
CVE-2021-28918 | netmask-1.0.6.tgz |
CVE-2021-23413 | jszip-3.4.0.tgz |
CVE-2023-26115 | word-wrap-1.2.3.tgz |
CVE-2022-48285 | jszip-3.5.0.tgz |
CVE-2022-21803 | nconf-0.10.0.tgz |
CVE-2022-38900 | decode-uri-component-0.2.0.tgz |
CVE-2022-21704 | log4js-3.0.6.tgz |
CVE-2020-11022 | jquery-3.2.1.min.js |
CVE-2021-32640 | ws-7.3.1.tgz |
CVE-2018-11499 | opennms-opennms-source-22.0.1-1 |
CVE-2020-28502 | xmlhttprequest-ssl-1.5.5.tgz |
CVE-2022-0437 | karma-3.1.4.tgz |
CVE-2012-6708 | jquery-1.8.1.min.js |
CVE-2020-7656 | jquery-1.8.1.min.js |
CVE-2018-11499 | node-sass-v4.14.1 |
CVE-2021-32640 | ws-6.1.4.tgz |
CVE-2019-6283 | opennms-opennms-source-22.0.1-1 |
WS-2020-0443 | socket.io-2.1.1.tgz |
CVE-2022-25883 | semver-6.3.0.tgz |
CVE-2021-3807 | ansi-regex-5.0.0.tgz |
CVE-2022-33987 | got-9.6.0.tgz |
CVE-2021-31597 | xmlhttprequest-ssl-1.5.5.tgz |
CVE-2020-28469 | glob-parent-3.1.0.tgz |
CVE-2021-44906 | minimist-1.2.0.tgz |
CVE-2022-40764 | snyk-1.406.0.tgz |
CVE-2021-23362 | hosted-git-info-2.8.8.tgz |
CVE-2021-3807 | ansi-regex-3.0.0.tgz |
CVE-2023-26159 | follow-redirects-1.13.0.tgz |
CVE-2023-26118 | angular-1.8.0.tgz |
CVE-2022-2421 | socket.io-parser-3.3.1.tgz |
CVE-2022-31129 | moment-2.29.0.tgz |
CVE-2020-36048 | engine.io-3.2.1.tgz |
CVE-2020-15366 | ajv-5.5.2.tgz |
CVE-2022-0436 | grunt-1.3.0.tgz |
CVE-2019-18797 | opennms-opennms-source-24.1.2-1 |
CVE-2020-26301 | ssh2-0.8.9.tgz |
CVE-2018-20822 | opennms-opennms-source-22.0.1-1 |
CVE-2022-48285 | jszip-3.4.0.tgz |
CVE-2022-29078 | ejs-2.5.9.tgz |
CVE-2022-41940 | engine.io-3.4.2.tgz |
CVE-2018-19797 | opennms-opennms-source-22.0.1-1 |
CVE-2021-29418 | netmask-1.0.6.tgz |
CVE-2019-11358 | jquery-3.2.1.min.js |
WS-2018-0650 | useragent-2.3.0.tgz |
CVE-2023-26116 | angular-1.8.0.tgz |
CVE-2020-23064 | jquery-3.2.1.min.js |
CVE-2022-24785 | moment-2.29.0.tgz |
CVE-2015-9251 | jquery-1.8.1.min.js |
CVE-2022-37602 | grunt-karma-3.0.2.tgz |
CVE-2022-0144 | shelljs-0.3.0.tgz |
WS-2020-0443 | socket.io-2.3.0.tgz |
CVE-2022-3517 | minimatch-3.0.4.tgz |
CVE-2021-23383 | handlebars-4.7.6.tgz |
CVE-2022-41940 | engine.io-3.2.1.tgz |
Base branch total remaining vulnerabilities: 173
Base branch commit: null
Total libraries scanned: 477
Scan token: 51e2f6364e4948ee9e626c20bf3795c5