Security vulnerability version 4.0.1 #3256
Labels
can't-fix
We don't know how to do this at the moment
Comments
wakaleo
added a commit
that referenced
this issue
Sep 8, 2023
…id a security vunerability (see #3256). The transitive dependency persists for serenity-bitbar, which is beyond our control
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
What happened?
Provides transitive vulnerable dependency maven:commons-collections:commons-collections:3.2.2
Cx78f40514-81ff 7.5 Uncontrolled Recursion vulnerability pending CVSS allocation
Cx78f40514-81ff 7.5 Uncontrolled Recursion vulnerability pending CVSS allocation
Results powered by Checkmarx(c)
What did you expect to happen?
No response
Serenity BDD version
4.0.1
JDK version
11
Execution environment
No response
How to reproduce the bug.
It's shown in the checkmarx plugin for IntelliJ
How can we make it happen?
Add it to the Serenity BDD backlog and wait for a volunteer to pick it up
The text was updated successfully, but these errors were encountered: