search

theodo-fintech / spring-search

Provides advanced search capabilities to a JPA entity
MIT License
193 stars 44 forks source link

Security problem #39

Closed hr-ireh closed 3 years ago

hr-ireh commented 3 years ago

The result of the library v0.2.2 review based on OWASP, I am trying to solve it, you have a solution? https://nvd.nist.gov image

luc-boussant commented 3 years ago

Hello @hr-ireh, if you want to try and fix this problem on spring-search, it would be very nice to create an MR. Something you can do to check the vulnerabilities is to launch mvn verify after cloning the repository. It will output an HTML file which will include the vulnerable dependencies that need a bump :)

hr-ireh commented 3 years ago

Hello @luc-boussant , I used OWASP Dependency-Check in jenkins, Thanks to the solutions :)