Skip to content

[NCL-9918] Fix CVEs - #141

Merged
patrikk0123 merged 2 commits into
Commonjava:masterfrom
patrikk0123:fixCves
Sep 11, 2026
Merged

[NCL-9918] Fix CVEs#141
patrikk0123 merged 2 commits into
Commonjava:masterfrom
patrikk0123:fixCves

Conversation

@patrikk0123

Copy link
Copy Markdown
Contributor

No description provided.

@github-actions

github-actions Bot commented Sep 10, 2026

Copy link
Copy Markdown

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output



Identified 67 dependencies

Detected 2 vulnerabilities (0 Critical, 0 High, 1 Medium, 1 Low)

+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| SEVERITY |    LIBRARY     |      ID       |                                             TOP FIX                                             |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | guava-21.0.jar | CVE-2023-2976 | Upgrade to version com.google.guava:guava:32.0.1-android,32.0.1-jre                             |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| LOW      | guava-21.0.jar | CVE-2020-8908 | Upgrade to version com.google.guava:guava:32.0.0-android, https://github.com/google/guava.git - |
|          |                |               | v32.0.0                                                                                         |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

path-mapped-pathdb-3.3-SNAPSHOT.pom
|-- path-mapped-pathdb-datastax-3.3-SNAPSHOT.jar
	|-- guava-21.0.jar [1 MEDIUM, 1 LOW]
	|-- cassandra-driver-core-3.12.1.jar
		|-- guava-21.0.jar [1 MEDIUM, 1 LOW]
	|-- cassandra-driver-mapping-3.12.1.jar
		|-- guava-21.0.jar [1 MEDIUM, 1 LOW]


No Policy violations were detected

Project 'path-mapped-storage' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=a525e644-1c7f-4265-a1f6-f949714f4deb
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=a6f4fbb9a2544f0c8b6685dec5ba58dee9596f69943146098106ab43cb758822

Mend AI scan succeeded.

Support Token: 083933f8bdf8a4c1caaecb9374724908d1789124183392
SAST scan output
*no findings*

Full logs and artifacts

@rnc

rnc commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

This will replace #135

@patrikk0123
patrikk0123 merged commit e3b5f3a into Commonjava:master Sep 11, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants