Skip to content

feat: Update dependencies in hale-platform to resolve security issues #27

feat: Update dependencies in hale-platform to resolve security issues

feat: Update dependencies in hale-platform to resolve security issues #27

Triggered via pull request October 26, 2023 20:05
Status Failure
Total duration 13m 9s
Artifacts 1

check.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

10 errors
171.[CRITICAL] CVE-2021-23463: 171#L1
XXE injection vulnerability
171.[CRITICAL] CVE-2021-42392: 171#L1
h2: Remote Code Execution in Console
171.[CRITICAL] CVE-2022-23221: 171#L1
Loading of custom classes from remote servers through JNDI
1.[CRITICAL] CVE-2017-11467: 1#L1
OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection
7.[CRITICAL] CVE-2016-6809: 7#L1
tika: Native deserialization of Java objects in matlab files
0.[CRITICAL] CVE-2023-25158: 0#L1
GeoTools OGC Filter SQL Injection Vulnerabilities
1.[CRITICAL] CVE-2022-41853: 1#L1
Untrusted input may lead to RCE attack
10.[CRITICAL] CVE-2014-4172: 10#L1
cas-client: Bypass of security constraints via URL parameter injection
8.[CRITICAL] CVE-2022-21724: .gradle/8.4#L1
jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes
8.[CRITICAL] CVE-2022-26520: .gradle/8.4#L1
postgresql-jdbc: Arbitrary File Write Vulnerability

Artifacts

Produced during runtime
Name Size
Vulnerability report (HTML) Expired
323 KB