Open HelloMavenEco opened 2 years ago
Hi! We spot a vulnerable dependency in your project, which might threaten your software. And we found that the vulnerable function of this CVE can be easily accessed from your software.
org.jeasy.batch.extensions.xstream.XstreamRecordMarshaller:<init>() ⬇️ com.thoughtworks.xstream.XStream:<init>() ⬇️ ... ⬇️ com.thoughtworks.xstream.XStream:setupSecurity()
Therefore, maybe you need to upgrade this dependency. Hope this can help you! 😄
Hi! We spot a vulnerable dependency in your project, which might threaten your software. And we found that the vulnerable function of this CVE can be easily accessed from your software.
Therefore, maybe you need to upgrade this dependency. Hope this can help you! 😄