search

exasol / parquet-edml-generator

Tool that generates EDML definitions for Parquet files
MIT License
1 stars 1 forks source link

Fix dependency check build #33

Closed kaklakariada closed 1 year ago

kaklakariada commented 1 year ago 
 Error:  Failed to execute goal org.sonatype.ossindex.maven:ossindex-maven-plugin:3.2.0:audit (default-cli) on project parquet-edml-generator: Detected 4 vulnerable components:
Error:    com.fasterxml.woodstox:woodstox-core:jar:5.3.0:compile; https://ossindex.sonatype.org/component/pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
Error:      * [CVE-2022-40152] CWE-787: Out-of-bounds Write (7.5); https://ossindex.sonatype.org/vulnerability/CVE-2022-40152?component-type=maven&component-name=com.fasterxml.woodstox%2Fwoodstox-core&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
Error:    org.json:json:jar:20220320:compile; https://ossindex.sonatype.org/component/pkg:maven/org.json/json@20220320?utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
Error:      * [CVE-2022-45688] CWE-787: Out-of-bounds Write (7.5); https://ossindex.sonatype.org/vulnerability/CVE-2022-45688?component-type=maven&component-name=org.json%2Fjson&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
Error:    com.fasterxml.jackson.core:jackson-core:jar:2.12.7:compile; https://ossindex.sonatype.org/component/pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.7?utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
Error:      * 1 vulnerability found (7.5); https://ossindex.sonatype.org/vulnerability/sonatype-2022-6438
Error:    commons-net:commons-net:jar:3.6:compile; https://ossindex.sonatype.org/component/pkg:maven/commons-net/commons-net@3.6?utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
Error:      * [CVE-2021-37533] CWE-20: Improper Input Validation (6.5); https://ossindex.sonatype.org/vulnerability/CVE-2021-37533?component-type=maven&component-name=commons-net%2Fcommons-net&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
Error: