Dependency upgrade - Githubissues

exasol / bigquery-virtual-schema

Virtual Schema for connecting Big Query as a data source to Exasol

MIT License

1 stars 1 forks source link

Dependency upgrade #23

Closed ckunki closed 1 year ago

ckunki commented 1 year ago

See log messages from build job Dependency Check:

io.netty:netty-handler:jar:4.1.86.Final in test
- CVE-2023-34462, severity CWE-770: Allocation of Resources Without Limits or Throttling (6.5)
com.google.guava:guava:jar:31.1-jre in test
- CVE-2023-2976, severity CWE-552: Files or Directories Accessible to External Parties (7.1)

Excluded vulnerabilities:

[CVE-2020-36641] CWE-611: Improper Restriction of XML External Entity Reference ('XXE') (9.8); https://ossindex.sonatype.org/vulnerability/CVE-2020-36641?component-type=maven&component-name=fr.turri%2FaXMLRPC&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
[CVE-2020-8908] CWE-379: Creation of Temporary File in Directory with Incorrect Permissions (3.3); https://ossindex.sonatype.org/vulnerability/CVE-2020-8908?component-type=maven&component-name=com.google.guava%2Fguava&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1

ckunki commented 1 year ago

 com.exasol:bigquery-virtual-schema:jar:2.2.1
 \- com.exasol:exasol-test-setup-abstraction-java:jar:2.0.1:test
    \- software.amazon.awssdk:cloudformation:jar:2.20.44:test
       \- software.amazon.awssdk:netty-nio-client:jar:2.20.44:test
          \- io.netty:netty-handler:jar:4.1.86.Final:test

com.exasol:bigquery-virtual-schema:jar:2.2.1
\- com.google.cloud:google-cloud-bigquery:jar:2.25.0:test
   \- com.google.guava:guava:jar:31.1-jre:test