-
Vulnerable Library - spring-boot-starter-validation-2.7.1.jar
Path to dependency file: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/yaml/snakeyaml/1.30/snakeyaml-1.30.j…
-
Vulnerable Library - spring-boot-starter-security-3.1.5.jar
Path to dependency file: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/security/spring-securi…
-
Vulnerable Library - guava-30.1-jre.jar
Guava is a suite of core and expanded libraries that include
utility classes, Google's collections, I/O classes, and
much more.
Library home page: htt…
-
## CVE-2024-23672 - High Severity Vulnerability
Vulnerable Library - tomcat-embed-websocket-8.5.15.jar
Core Tomcat implementation
Path to dependency file: /operation-expert/pom.xml
Path to vulnerabl…
-
## Summary
Now that #18715 is landed, we need to update the splunk modules to use this library
- [ ] modules/exploits/multi/http/splunk_upload_app_exec.rb
- [x] modules/exploits/multi/http/splunk…
-
Current output for log4j 2.x findings without JndiLookup.class is: `_POTENTIALLY_SAFE_ (Did you remove JndiLookup.class?)_` I think `_POTENTIALLY_SAFE_` is not correct any longer because log4j 2.x wi…
-
## CVE-2020-9547 - Critical Severity Vulnerability
Vulnerable Library - jackson-databind-2.9.8.jar
General data-binding functionality for Jackson: works on core streaming API
Library home page: http…
-
## CVE-2022-3509 - High Severity Vulnerability
Vulnerable Libraries - protobuf-java-3.0.2.jar, protobuf-java-3.2.0.jar
protobuf-java-3.0.2.jar
Core Protocol Buffers library. Protocol Buffers are a…
-
Details -
```
$ docker build . -f gh_crawler/docker/Dockerfile -t static-scanner:latest
Sending build context to Docker daemon 387.1kB
Step 1/19 : FROM golang:1.21 as builder
.
.
.
Step …
-
Vulnerable Library - spring-boot-starter-thymeleaf-3.1.5.jar
Path to dependency file: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/thymeleaf/thymeleaf/3.1.1.RELEASE/thy…