Vulnerability: Unsupported JRE

yy0931 / sqlite3-editor

https://marketplace.visualstudio.com/items?itemName=yy0931.vscode-sqlite3-editor

GNU General Public License v3.0

838 stars 6 forks source link

Vulnerability: Unsupported JRE #54

Closed Segelzwerg closed 5 months ago

Segelzwerg commented 5 months ago

Nessus Scanners reports there is an unsupported JRE Version

The following Java JRE installation is unsupported :

  Path              : ***/.vscode/extensions/yy0931.vscode-sqlite3-editor-1.0.184/webview/node_modules/monaco-editor/min/vs/basic-languages/java
  Installed version : 1.0.184_0_
  Latest versions   : 1.11.x / 1.17.x / 1.20.x
  Support dates     : No support dates are available.

yy0931 commented 5 months ago

This extension doesn't include Java JRE.

The 'path' only contains JavaScript files for syntax highlighting java code (https://github.com/microsoft/monaco-editor/tree/main/src/basic-languages/java), and the 'installed version' is not Java version but the extension's version.