Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[AUTO] Increment version to 2.20.0-SNAPSHOT #1063

Open
wants to merge 1 commit into
base: 2.x
Choose a base branch
from

Increment version to 2.20.0-SNAPSHOT

c6573a7
Select commit
Loading
Failed to load commit list.
Open

[AUTO] Increment version to 2.20.0-SNAPSHOT #1063

Increment version to 2.20.0-SNAPSHOT
c6573a7
Select commit
Loading
Failed to load commit list.
Mend for GitHub.com / WhiteSource Security Check failed Feb 5, 2025 in 3m 6s

Security Report

You have successfully remediated 1 vulnerabilities, but introduced 3 new vulnerabilities in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
CVE-2024-12798

Path to dependency file: /build.gradle

Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/ch.qos.logback/logback-core/1.3.14/436bd0d56730df756cff6d12d0f97df6f275e4a/logback-core-1.3.14.jar

Dependency Hierarchy:

-> ktlint-0.47.1.jar (Root Library)

   -> logback-classic-1.3.14.jar

     -> ❌ logback-core-1.3.14.jar (Vulnerable Library)

Medium 6.6 logback-core-1.3.14.jar Upgrade to version: ch.qos.logback:logback-core:1.5.13, ch.qos.logback:logback-classic:1.5.13 None
CVE-2024-12798

Path to dependency file: /build.gradle

Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/ch.qos.logback/logback-classic/1.3.14/a2f0045eae641a356b74afb0d3b85268181a93cf/logback-classic-1.3.14.jar

Dependency Hierarchy:

-> ktlint-0.47.1.jar (Root Library)

   -> ❌ logback-classic-1.3.14.jar (Vulnerable Library)

Medium 6.6 logback-classic-1.3.14.jar Upgrade to version: ch.qos.logback:logback-core:1.5.13, ch.qos.logback:logback-classic:1.5.13 None
CVE-2024-12801

Path to dependency file: /build.gradle

Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/ch.qos.logback/logback-core/1.3.14/436bd0d56730df756cff6d12d0f97df6f275e4a/logback-core-1.3.14.jar

Dependency Hierarchy:

-> ktlint-0.47.1.jar (Root Library)

   -> logback-classic-1.3.14.jar

     -> ❌ logback-core-1.3.14.jar (Vulnerable Library)

Medium 4.4 logback-core-1.3.14.jar Upgrade to version: ch.qos.logback:logback-core:1.5.13 None

✔️ Remediated vulnerabilities:

CVE Vulnerable Library
CVE-2024-7254 protobuf-java-3.22.3.jar

Base branch total remaining vulnerabilities: 1
Base branch commit: 2f8177314e61ffca0e335a428c3c689aa6fbb2bb


Total libraries scanned: 192

Scan token: b562ee1fcb7c442b8a8ae854fb47db6a

View more details on Mend for GitHub.com