Open
Description
| Package | Version | Type | CVE | CVSS | Severity | Status | HasFix |
|---|---|---|---|---|---|---|---|
| com.fasterxml.jackson.core_jackson-core | 2.13.4 | /opt/ibm/connectors/stocator/stocator-1.1.6-IBM-SDK.jar | jar | PRISMA-2023-0067 | 7.5 | high | fixed in 2.15.0 |
| com.google.guava_guava | 30 | jar | CVE-2023-2976 | 4 | medium | fixed in 32.0.0 | Y |
- Note this already takes care of guava, we need to test it -> Bump guava from 30.0-jre to 32.0.0-jre #329
- Bumping up ibm-cos-sdk will bring latest jackson
Metadata
Metadata
Assignees
Labels
No labels