Update dependency org.hibernate:hibernate-validator to v6 (main) #219
Security Report
❗️Scan Incomplete: The scan completed with partial failure. The integration encountered issues with one or more projects in this repository, preventing their scan. The errors occurred in the following package managers: gradle,sbt. Consequently, there may be gaps in the coverage of open-source dependencies used in the repository.
Scan Details Report
gradle
/tmp/ws-scm/comms-router/test/demo-helper/play-helper/build.gradle
| Step | Level | Description | Details |
|---|---|---|---|
| Preparing the project for scan | ⚠Warn | One or more of the installations failed | failed running mend init script (mendDeps): NOTE: Picked up JDK_JAVA_OPTIONS: --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/sun.reflect.generics.reflectiveObjects=ALL-UNNAMED FAILURE: Build failed with an exception. * Where: Build file '/tmp/ws-scm/comms-router/test/demo-helper/play-helper/build.gradle' line: 2 * What went wrong: Plugin [id: 'play'] was not found in any o... |
You have successfully remediated 3 vulnerabilities, but introduced 1 new vulnerabilities in this branch.❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Exploit Maturity | EPSS | Vulnerable Library | Suggested Fix | Issue | Reachability |
|---|---|---|---|---|---|---|---|---|
CVE-2023-1932Path to dependency file: /web/pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/org/hibernate/validator/hibernate-validator/6.2.0.CR1/hibernate-validator-6.2.0.CR1.jar,/home/wss-scanner/.m2/repository/org/hibernate/validator/hibernate-validator/6.2.0.CR1/hibernate-validator-6.2.0.CR1.jar,/home/wss-scanner/.m2/repository/org/hibernate/validator/hibernate-validator/6.2.0.CR1/hibernate-validator-6.2.0.CR1.jar,/home/wss-scanner/.m2/repository/org/hibernate/validator/hibernate-validator/6.2.0.CR1/hibernate-validator-6.2.0.CR1.jar,/home/wss-scanner/.m2/repository/org/hibernate/validator/hibernate-validator/6.2.0.CR1/hibernate-validator-6.2.0.CR1.jar,/home/wss-scanner/.m2/repository/org/hibernate/validator/hibernate-validator/6.2.0.CR1/hibernate-validator-6.2.0.CR1.jar,/home/wss-scanner/.m2/repository/org/hibernate/validator/hibernate-validator/6.2.0.CR1/hibernate-validator-6.2.0.CR1.jar,/home/wss-scanner/.m2/repository/org/hibernate/validator/hibernate-validator/6.2.0.CR1/hibernate-validator-6.2.0.CR1.jar Dependency Hierarchy: -> ❌ hibernate-validator-6.2.0.CR1.jar (Vulnerable Library) |
 Medium |
6.1 | Not Defined | 0.2% | hibernate-validator-6.2.0.CR1.jar | Upgrade to version: org.hibernate.validator:hibernate-validator:6.2.0.Final | None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2023-1932 | hibernate-validator-5.4.1.Final.jar |
| CVE-2020-10693 | hibernate-validator-5.4.1.Final.jar |
| CVE-2017-7536 | hibernate-validator-5.4.1.Final.jar |
Base branch total remaining vulnerabilities: 184
Base branch commit: 4e5656db54be4b22481fe3774c2caeba51bac190
Total libraries scanned: 250
Scan token: b92756fa77d54339adfd8c1e0a5da0d5