[AUTO] Increment version to 2.19.0-SNAPSHOT #1767
Security Report
3 new vulnerabilities were introduced in this branch.
❌ New vulnerabilities:
CVE | Severity | CVSS Score | Vulnerable Library | Suggested Fix | Issue |
---|---|---|---|---|---|
CVE-2024-12798Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/ch.qos.logback/logback-core/1.3.14/436bd0d56730df756cff6d12d0f97df6f275e4a/logback-core-1.3.14.jar Dependency Hierarchy: -> ktlint-0.45.1.jar (Root Library) -> logback-classic-1.3.14.jar -> ❌ logback-core-1.3.14.jar (Vulnerable Library) |
Medium | 6.6 | logback-core-1.3.14.jar | Upgrade to version: ch.qos.logback:logback-core:1.5.13, ch.qos.logback:logback-classic:1.5.13 | None |
CVE-2024-12798Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/ch.qos.logback/logback-classic/1.3.14/a2f0045eae641a356b74afb0d3b85268181a93cf/logback-classic-1.3.14.jar Dependency Hierarchy: -> ktlint-0.45.1.jar (Root Library) -> ❌ logback-classic-1.3.14.jar (Vulnerable Library) |
Medium | 6.6 | logback-classic-1.3.14.jar | Upgrade to version: ch.qos.logback:logback-core:1.5.13, ch.qos.logback:logback-classic:1.5.13 | None |
CVE-2024-12801Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/ch.qos.logback/logback-core/1.3.14/436bd0d56730df756cff6d12d0f97df6f275e4a/logback-core-1.3.14.jar Dependency Hierarchy: -> ktlint-0.45.1.jar (Root Library) -> logback-classic-1.3.14.jar -> ❌ logback-core-1.3.14.jar (Vulnerable Library) |
Medium | 4.4 | logback-core-1.3.14.jar | Upgrade to version: ch.qos.logback:logback-core:1.5.13 | None |
Base branch total remaining vulnerabilities: 0
Base branch commit: 90972752699d3fb27a077b64dbaae4588d5d8303
Total libraries scanned: 160
Scan token: c46547602e324e889d4ece33e5d554ec