Skip to content

Bump org.owasp:dependency-check-maven from 10.0.4 to 11.0.0 #239

Bump org.owasp:dependency-check-maven from 10.0.4 to 11.0.0

Bump org.owasp:dependency-check-maven from 10.0.4 to 11.0.0 #239

Triggered via push October 22, 2024 19:23
Status Failure
Total duration 13m 27s
Artifacts 7

build.yml

on: push
Recreate Comment
4s
Recreate Comment
Populate Cache
29s
Populate Cache
Build and Test
22s
Build and Test
Fit to window
Zoom out
Zoom in

Annotations

6 errors
/home/runner/.m2/repository/org/springframework/spring-core/6.1.13/spring-core-6.1.13.jar ► CVE-2024-38820 ► pkg:maven/org.springframework/spring-core@6.1.13: target/owasp/dependency-check-junit.xml#L0
Failed test found in: target/owasp/dependency-check-junit.xml Error: cvssV3: MEDIUM, score: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A)
/home/runner/.m2/repository/org/springframework/spring-web/6.1.13/spring-web-6.1.13.jar ► CVE-2024-38820 ► pkg:maven/org.springframework/spring-web@6.1.13: target/owasp/dependency-check-junit.xml#L0
Failed test found in: target/owasp/dependency-check-junit.xml Error: cvssV3: MEDIUM, score: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A)
/home/runner/.m2/repository/org/springframework/spring-webmvc/6.1.13/spring-webmvc-6.1.13.jar ► CVE-2024-38819 ► pkg:maven/org.springframework/spring-webmvc@6.1.13: target/owasp/dependency-check-junit.xml#L0
Failed test found in: target/owasp/dependency-check-junit.xml Error: cvssV2: HIGH, score: 8.199999809265137 (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)
/home/runner/.m2/repository/org/springframework/spring-webmvc/6.1.13/spring-webmvc-6.1.13.jar ► CVE-2024-38820 ► pkg:maven/org.springframework/spring-webmvc@6.1.13: target/owasp/dependency-check-junit.xml#L0
Failed test found in: target/owasp/dependency-check-junit.xml Error: cvssV3: MEDIUM, score: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A)
OWASP Scan
Process completed with exit code 1.
OWASP Scan
Failed tests were found and 'fail-on-error' option is set to true

Artifacts

Produced during runtime
Name Size
compiled-classes Expired
8.49 KB
int-test-app-logs Expired
1.18 KB
int-test-report Expired
469 Bytes
jars Expired
21.1 MB
maven-state Expired
1.67 KB
owasp-report Expired
1.62 KB
unit-test-report Expired
4.51 KB