Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade commons-validator library (to get latest commons-beanutils) to fix twistlock issue findings #337

Open
joseroque96 opened this issue Dec 18, 2023 · 1 comment

Comments

@joseroque96
Copy link

Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.

Path to vulnerable library: /home/wss-scanner/.ivy2/cache/commons-beanutils/commons-beanutils/jars/commons-beanutils-1.9.2.jar

Dependency Hierarchy:

stocator-1.1.5.jar (Root Library)
commons-validator-1.6.jar
❌ commons-beanutils-1.9.2.jar (Vulnerable Library)
Found in HEAD commit: 346070213bf476fc63ca8b5d9d7909d4310f32ad

Found in base branch: main

Currently "commons-validator" "1.8.0" is free os vulnerabilities.

@mrmadira
Copy link
Collaborator

@shivangi24 - can you have a check

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants