Closed bcoveny closed 1 year ago
Hi! Sorry for the delay, but I respond with good news.
OSS Index is going through a major upgrade, as described here: https://ossindex.sonatype.org/updates-notice
The most clear and obvious benefit is far fewer false negatives and false positives, and vulnerabilities will be added to the system on a much more frequent and rapid basis. Once the upgrade is completed you should see most (if not all) of the reported data issues be resolved.
Closing old issues. This was resolved during the aforementioned major upgrade.
To facilitate future automation, please use the following format
Advisory details
More information MyBatis before 3.5.6 mishandles deserialization of object streams.