-
**What happened**:
Grype is reporting a (very old) vulnerability in the `webrick` ruby gem despite running a version with the fix:
```
> docker run --rm -it -v /var/run/docker.sock:/var/run/docke…
-
## CVE-2021-46877 - High Severity Vulnerability
Vulnerable Library - jackson-databind-2.10.2.jar
General data-binding functionality for Jackson: works on core streaming API
Library home page: http:/…
-
This has been a topic of discussion before, but as the number of CVEs has increased I wanted to ask clarity on the meaning of "MITIGATED". Taking an example JSON file report from Logpresso-Log4jscan-…
-
SAP Vulnerability Advisory tool automatically collates CVE information from NVD and publishes them as SAP CERT Notifications (SCNs).
The primary and source-of-truth feed that the tool uses is the Nat…
-
## CVE-2019-10086 - High Severity Vulnerability
Vulnerable Libraries - commons-beanutils-1.7.0.jar, commons-beanutils-core-1.7.0.jar
commons-beanutils-1.7.0.jar
Path to dependency file: /foxtrot-…
-
## Description
A community user has reported that version 4.8.0 of the vulnerability detector incorrectly reports some vulnerabilities. This issue aims to investigate these reports, verify the accura…
-
## CVE-2020-11002 - High Severity Vulnerability
Vulnerable Library - dropwizard-validation-1.3.13.jar
Dropwizard is a Java framework for developing ops-friendly, high-performance, RESTful web
…
-
## WHAT
As part of #95 we have now setup `govulncheck` to run on each PR and periodically on master + stable release branches as part of `verify` jobs.
`govulncheck` has now added support for ope…
-
## CVE-2024-22259 - High Severity Vulnerability
Vulnerable Libraries - spring-web-4.3.9.RELEASE.jar, spring-web-5.2.6.RELEASE.jar
spring-web-4.3.9.RELEASE.jar
Spring Web
Library home page: https:/…
-