Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

依赖库漏洞 #46

Open
qiyuey opened this issue Jul 1, 2024 · 0 comments
Open

依赖库漏洞 #46

qiyuey opened this issue Jul 1, 2024 · 0 comments

Comments

@qiyuey
Copy link

qiyuey commented Jul 1, 2024

Provides transitive vulnerable dependency maven:com.google.guava:guava:27.0.1-jre CVE-2023-2976 7.1 Files or Directories Accessible to External Parties vulnerability with High severity found CVE-2020-8908 3.3 Incorrect Permission Assignment for Critical Resource vulnerability with Low severity found Results powered by Checkmarx(c)

Provides transitive vulnerable dependency maven:com.google.protobuf:protobuf-java:2.4.1 CVE-2022-3509 7.5 Uncontrolled Resource Consumption vulnerability with High severity found CVE-2021-22569 5.5 Incorrect Behavior Order vulnerability with Medium severity found CVE-2022-3510 7.5 Uncontrolled Resource Consumption vulnerability with High severity found CVE-2022-3171 7.5 Uncontrolled Resource Consumption vulnerability with High severity found CVE-2015-5237 8.8 Out-of-bounds Write vulnerability with High severity found Results powered by Checkmarx(c)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant