Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix sca vulnrability outdated #240

Merged
merged 9 commits into from
Sep 24, 2024
Merged

Fix sca vulnrability outdated #240

merged 9 commits into from
Sep 24, 2024

Conversation

Korjen97
Copy link
Contributor

No description provided.

Copy link

github-actions bot commented Sep 18, 2024

Logo
Checkmarx One – Scan Summary & Detailsa2085477-d1ec-4d89-9d57-e5459ee50de0

Policy Management Violations

Policy Name Rule(s) Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities true

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH CVE-2024-38809 Maven-org.springframework:spring-web-5.3.34 Vulnerable Package
HIGH CVE-2024-38816 Maven-org.springframework:spring-webmvc-5.3.34 Vulnerable Package
MEDIUM CVE-2024-38808 Maven-org.springframework:spring-expression-5.3.34 Vulnerable Package
LOW CVE-2020-8908 Maven-com.google.guava:guava-31.1-android Vulnerable Package

Fixed Issues

Severity Issue Source File / Package
HIGH CVE-2024-22243 Maven-org.springframework:spring-web-5.3.29
HIGH CVE-2024-22259 Maven-org.springframework:spring-web-5.3.29
HIGH CVE-2024-22262 Maven-org.springframework:spring-web-5.3.29
MEDIUM Unpinned Actions Full Length Commit SHA /release-drafter.yml: 33
MEDIUM Unpinned Actions Full Length Commit SHA /update-cli.yml: 32
MEDIUM Unpinned Actions Full Length Commit SHA /delete-dev-releases.yml: 28
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 115
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 23
MEDIUM Unpinned Actions Full Length Commit SHA /ci.yml: 35
MEDIUM Unpinned Actions Full Length Commit SHA /ast-scan.yml: 12
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 77
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 102
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 14

@OrShamirCM OrShamirCM merged commit 7cd8948 into main Sep 24, 2024
6 checks passed
@amacedoo amacedoo deleted the Itay/Fix-sca-vulnrability branch November 11, 2024 11:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants