Hello! We found a vulnerable dependeny in your project. Would you like an upgrade?

[JavaEcosystemResearch]

Hi! We spot a vulnerable dependency in your project, which might threaten your software. And we found that the vulnerable function of this CVE can be easily accessed from your software.

• CVE_ID: CVE-2014-3578
• Vulnerable dependency: org.springframework:spring-core
• Your invocation path to the vulnerable method:

  org.fuzzydb.core.Settings:initialise()
  ⬇️
  org.springframework.core.io.FileSystemResource:<init>(java.lang.String)
  ⬇️
  org.springframework.util.StringUtils:cleanPath(java.lang.String)

Therefore, maybe you need to upgrade this dependency. Hope this can help you! 😄