SCA PR #3
SCA PR #3
Conversation
![prisma-cloud-devsecops[bot]](https://avatars.githubusercontent.com/in/135857?s=60&v=4){kind=small}
|
|
||
| compile "com.google.guava:guava:11.0.2" | ||
|
|
||
| testCompile "junit:junit:4.8.2" |
There was a problem hiding this comment.
junit:junit 4.8.2 / build.gradle
Total vulnerabilities: 1
| Critical: 0 | High: 0 | Medium: 1 | Low: 0 |
|---|
| Vulnerability ID | Severity | CVSS | Fixed in | Status |
|---|---|---|---|---|
| CVE-2020-15250 |  MEDIUM |
4.4 | 4.13.1 |
Open |
|
|
||
| ext.hadoopVersion = "2.0.0-mr1-cdh4.0.1" | ||
| dependencies { | ||
| provided "org.apache.hadoop:hadoop-client:${hadoopVersion}" |
There was a problem hiding this comment.
org.apache.hadoop:hadoop-client 2.0.0-mr1-cdh4.0.1 / build.gradle
Total vulnerabilities: 2
| Critical: 0 | High: 1 | Medium: 1 | Low: 0 |
|---|
| Vulnerability ID | Severity | CVSS | Fixed in | Status |
|---|---|---|---|---|
| CVE-2017-3162 |  HIGH |
7.3 | 2.7.0 |
Open |
| CVE-2017-3161 | MEDIUM |
6.1 | 2.7.0 |
Open |
| dependencies { | ||
| provided "org.apache.hadoop:hadoop-client:${hadoopVersion}" | ||
|
|
||
| compile "com.google.guava:guava:11.0.2" |
There was a problem hiding this comment.
com.google.guava:guava 11.0.2 / build.gradle
Total vulnerabilities: 3
| Critical: 0 | High: 1 | Medium: 1 | Low: 1 |
|---|
| Vulnerability ID | Severity | CVSS | Fixed in | Status |
|---|---|---|---|---|
| CVE-2023-2976 | HIGH |
7.1 | 32.0.0 |
Open |
| CVE-2018-10237 | MEDIUM |
5.9 | 24.1.1 |
Open |
| CVE-2020-8908 |  LOW |
3.3 | 32.0.0 |
Open |
| @@ -0,0 +1,45 @@ | |||
| apply plugin: "java" | |||
There was a problem hiding this comment.
junit:junit 4.8.2 / build.gradle
This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
|
||
| compile "com.google.guava:guava:11.0.2" | ||
|
|
||
| testCompile "junit:junit:4.8.2" |
Check notice
Code scanning / checkov
License Common Public License Version 1.0 - junit:junit: 4.8.2
| dependencies { | ||
| provided "org.apache.hadoop:hadoop-client:${hadoopVersion}" | ||
|
|
||
| compile "com.google.guava:guava:11.0.2" |
Check failure
Code scanning / checkov
CVE-2023-2976 - com.google.guava:guava: 11.0.2
| dependencies { | ||
| provided "org.apache.hadoop:hadoop-client:${hadoopVersion}" | ||
|
|
||
| compile "com.google.guava:guava:11.0.2" |
Check warning
Code scanning / checkov
CVE-2018-10237 - com.google.guava:guava: 11.0.2
| dependencies { | ||
| provided "org.apache.hadoop:hadoop-client:${hadoopVersion}" | ||
|
|
||
| compile "com.google.guava:guava:11.0.2" |
Check notice
Code scanning / checkov
CVE-2020-8908 - com.google.guava:guava: 11.0.2
|
|
||
| compile "com.google.guava:guava:11.0.2" | ||
|
|
||
| testCompile "junit:junit:4.8.2" |
Check warning
Code scanning / checkov
CVE-2020-15250 - junit:junit: 4.8.2
|
|
||
| ext.hadoopVersion = "2.0.0-mr1-cdh4.0.1" | ||
| dependencies { | ||
| provided "org.apache.hadoop:hadoop-client:${hadoopVersion}" |
Check warning
Code scanning / checkov
CVE-2017-3161 - org.apache.hadoop:hadoop-client: 2.0.0-mr1-cdh4.0.1
|
|
||
| ext.hadoopVersion = "2.0.0-mr1-cdh4.0.1" | ||
| dependencies { | ||
| provided "org.apache.hadoop:hadoop-client:${hadoopVersion}" |
Check failure
Code scanning / checkov
CVE-2017-3162 - org.apache.hadoop:hadoop-client: 2.0.0-mr1-cdh4.0.1
No description provided.