Skip to content

Conversation

@IAmATeaPot418
Copy link
Collaborator

No description provided.

@github-actions
Copy link

Warning

Endor Labs detected 1 policy violations associated with this pull request.

Please review the findings that caused the policy violations.

📋 Policy: Reachable findings that are critical (1 finding)

📥 Package mvn://com.endor.webapp:endor-java-webapp-demo@4.0-SNAPSHOT

⤵️ Dependency: mvn://org.apache.commons:commons-text@1.9
🚩 GHSA-599f-7c49-w659: Arbitrary code execution in Apache Commons Text

Details

  • Severity: Critical
  • Categories: Security Vulnerability SCA
  • Remediation: Update com.endor.webapp:endor-java-webapp-demo@4.0-SNAPSHOT to use org.apache.commons:commons-text version 1.10.0 (current: 1.9, latest: 1.14.0).

This comment was automatically generated by Endor Labs.
Scanned @ 07-25-2025 20:58:03 UTC

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants