Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update mend: high confidence minor and patch dependency updates #19

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

chore(deps): update mend: high confidence minor and patch dependency …

3a7ad23
Select commit
Loading
Failed to load commit list.
Open

chore(deps): update mend: high confidence minor and patch dependency updates #19

chore(deps): update mend: high confidence minor and patch dependency …
3a7ad23
Select commit
Loading
Failed to load commit list.
Mend for github.com / Mend Security Check failed Oct 28, 2024 in 1m 28s

Security Report

You have successfully remediated 1 vulnerabilities, but introduced 1 new vulnerabilities in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue Reachability
CVE-2024-28122

Path to dependency file: /tests/components/application-connector/go.mod

Path to vulnerable library: /go/pkg/mod/cache/download/github.com/lestrrat-go/jwx/@v/v1.2.28.mod

Dependency Hierarchy:

-> github.com/kyma-incubator/compass/components/director-v0.0.0-20240311095305-43ec866d6b0c (Root Library)

   -> github.com/kyma-incubator/compass/components/hydrator-v0.0.0-20240228074947-02a81b1e3bf8

     -> ❌ github.com/Lestrrat-go/jwx-v1.2.28 (Vulnerable Library)

Medium 6.8 github.com/Lestrrat-go/jwx-v1.2.28 Upgrade to version: lestrrat-go/jwx-v1.2.29,v2.0.21 #113

✔️ Remediated vulnerabilities:

CVE Vulnerable Library
CVE-2024-24786 google.golang.org/protobuf-v1.28.1

Base branch total remaining vulnerabilities: 7
Base branch commit: 4d90437f8c56049480ff7bd0813a8cb04282979b


Total libraries scanned: 150

Scan token: ab8a47437dd94a2d90dd8491db975d13

View more details on Mend for github.com