Skip to content

Downgrade Commons Text#15

Open
IAmATeaPot418 wants to merge 1 commit intomainfrom
js/downgrade
Open

Downgrade Commons Text#15
IAmATeaPot418 wants to merge 1 commit intomainfrom
js/downgrade

Conversation

@IAmATeaPot418
Copy link
Contributor

No description provided.

@github-actions
Copy link

Warning

Endor Labs detected 1 policy violations associated with this pull request.

Please review the findings that caused the policy violations.

📋 Policy: Reachable findings that are critical (1 finding)

📥 Package mvn://com.endor.webapp:endor-java-webapp-demo@4.0-SNAPSHOT

⤵️ Dependency: mvn://org.apache.commons:commons-text@1.9
🚩 GHSA-599f-7c49-w659: Arbitrary code execution in Apache Commons Text

Details

  • Severity: Critical
  • Categories: Security Vulnerability SCA
  • Remediation: Update com.endor.webapp:endor-java-webapp-demo@4.0-SNAPSHOT to use org.apache.commons:commons-text version 1.10.0 (current: 1.9, latest: 1.14.0).

This comment was automatically generated by Endor Labs.
Scanned @ 07-25-2025 20:58:03 UTC

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant