OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection

OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection

apache-commons-collections: InvokerTransformer code execution during deserialisation

apache-commons-collections: InvokerTransformer code execution during deserialisation

pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE

pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE

spring-framework: RCE via Data Binding on JDK 9+

spring-framework: RCE via Data Binding on JDK 9+

❌ Tests reported 8 failures

Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32, voxmedia/github-action-slack-notify-build@3665186a8c1a022b28a1dbe0954e73aa9081ea9e. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.

No files were found with the provided path: build/reports/tests. No artifacts will be uploaded.

The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/