Closed palhoye closed 4 months ago
Checkmarx reports the following transitive vulnerability via Gradle for "io.zonky.test:embedded-database-spring-test:2.5.0":
Provides transitive vulnerable dependency maven:org.apache.commons:commons-compress:1.24.0
Thank you for the report. The fix has just been merged into the affected library here: https://github.com/zonkyio/embedded-postgres/pull/128
Checkmarx reports the following transitive vulnerability via Gradle for "io.zonky.test:embedded-database-spring-test:2.5.0":
Provides transitive vulnerable dependency maven:org.apache.commons:commons-compress:1.24.0