Repository navigation
Update dependency org.apache.directory.server:apacheds-core to v2 - #50
dev-mend-for-github-com[bot] wants to merge 1 commit into
Security Report
❗️Scan Warnings: The scan completed with warnings. The integration encountered issues with one or more projects in this repository. Consequently, there may be gaps in the coverage of open-source dependencies used in the repository.
Scan Details Report
maven
/tmp/ws-scm/BenchmarkJava/pom.xml
| Step | Level | Description | Details |
|---|---|---|---|
| Preparing the project for scan | ⚠Warn | One or more of the installations failed | [ERROR] Failed to execute goal on project benchmark: Could not resolve dependencies for project org.owasp:benchmark:war:1.2 |
| Resolving the project | ⚠Warn | Some problems occurred while performing the resolution operation |
|
You have successfully remediated 45 vulnerabilities, but introduced 5 new vulnerabilities in this branch.❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue | Reachability |
|---|---|---|---|---|---|---|---|
CVE-2020-25638Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ hibernate-core-3.6.10.Final.jar (Vulnerable Library) |
 High |
7.4 | Direct hibernate-core-3.6.10.Final.jar |
hibernate-core-3.6.10.Final.jar | 5.3.20.Final | #12 | |
CVE-2025-5878Path to dependency file: /pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/org/owasp/esapi/esapi/2.3.0.0/esapi-2.3.0.0.jar Dependency Hierarchy: -> ❌ esapi-2.3.0.0.jar (Vulnerable Library) |
High |
7.3 | Direct esapi-2.3.0.0.jar |
esapi-2.3.0.0.jar | 2.7.0.0 | #14 | |
CVE-2019-14900Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ hibernate-core-3.6.10.Final.jar (Vulnerable Library) |
 Medium |
6.5 | Direct hibernate-core-3.6.10.Final.jar |
hibernate-core-3.6.10.Final.jar | #12 | ||
CVE-2023-33202Path to dependency file: /pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/org/bouncycastle/bcprov-jdk15on/1.70/bcprov-jdk15on-1.70.jar Dependency Hierarchy: -> ❌ bcprov-jdk15on-1.70.jar (Vulnerable Library) |
Medium |
5.5 | Direct bcprov-jdk15on-1.70.jar |
bcprov-jdk15on-1.70.jar | #47 | ||
CVE-2024-38820Path to dependency file: /pom.xml Path to vulnerable library: /pom.xml Dependency Hierarchy: -> ❌ spring-context-4.3.30.RELEASE.jar (Vulnerable Library) |
 Low |
3.1 | Direct spring-context-4.3.30.RELEASE.jar |
spring-context-4.3.30.RELEASE.jar | #15 |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2023-24998 | commons-fileupload-1.3.3.jar |
| CVE-2022-22965 | spring-beans-4.3.30.RELEASE.jar |
| CVE-853521-722872 | commons-pool-1.5.4.jar |
| CVE-2024-38820 | spring-core-4.3.30.RELEASE.jar |
| CVE-2023-26464 | log4j-1.2.17.jar |
| CVE-2026-41848 | spring-core-4.3.30.RELEASE.jar |
| CVE-2020-9488 | log4j-1.2.17.jar |
| WS-2022-0467 | reload4j-1.2.19.jar |
| CVE-2022-22970 | spring-beans-4.3.30.RELEASE.jar |
| CVE-2026-41849 | spring-expression-4.3.30.RELEASE.jar |
| CVE-2026-47065 | mina-core-2.0.0-RC1.jar |
| CVE-2026-41851 | spring-expression-4.3.30.RELEASE.jar |
| CVE-2021-41973 | mina-core-2.0.0-RC1.jar |
| CVE-2026-41850 | spring-expression-4.3.30.RELEASE.jar |
| GHSA-257q-pv89-v3xv | jquery-2.1.4.min.js |
| CVE-2022-23305 | log4j-1.2.17.jar |
| CVE-2019-0231 | mina-core-2.0.0-RC1.jar |
| CVE-2018-1271 | spring-core-4.3.30.RELEASE.jar |
| CVE-967109-690347 | dom4j-1.6.1.jar |
| CVE-2025-48734 | commons-beanutils-1.9.4.jar |
| CVE-106848-507795 | commons-io-2.6.jar |
| GHSA-257q-pv89-v3xv | jquery-1.11.3.min.js |
| CVE-2025-41242 | spring-beans-4.3.30.RELEASE.jar |
| CVE-2021-4104 | log4j-1.2.17.jar |
| CVE-2026-41852 | spring-expression-4.3.30.RELEASE.jar |
| CVE-2022-28366 | neko-htmlunit-2.24.jar |
| CVE-2025-46392 | commons-configuration-1.10.jar |
| CVE-2022-22970 | spring-core-4.3.30.RELEASE.jar |
| CVE-2024-38828 | spring-core-4.3.30.RELEASE.jar |
| CVE-2018-1000632 | dom4j-1.6.1.jar |
| CVE-2018-1257 | spring-core-4.3.30.RELEASE.jar |
| CVE-2020-9493 | log4j-1.2.17.jar |
| CVE-2023-20861 | spring-expression-4.3.30.RELEASE.jar |
| CVE-2022-22950 | spring-expression-4.3.30.RELEASE.jar |
| CVE-2022-23307 | log4j-1.2.17.jar |
| CVE-2024-47554 | commons-io-2.6.jar |
| CVE-2024-52046 | mina-core-2.0.0-RC1.jar |
| CVE-2021-29425 | commons-io-2.6.jar |
| CVE-2023-43643 | antisamy-1.6.7.jar |
| CVE-2020-10683 | dom4j-1.6.1.jar |
| CVE-2023-20863 | spring-expression-4.3.30.RELEASE.jar |
| WS-2014-0034 | commons-fileupload-1.3.3.jar |
| CVE-2019-17571 | log4j-1.2.17.jar |
| CVE-2024-38808 | spring-expression-4.3.30.RELEASE.jar |
| CVE-2022-29546 | neko-htmlunit-2.24.jar |
Base branch total remaining vulnerabilities: 105
Base branch commit: ebfb28b0c8f03b37017fb2e66087888ad08b1806
Total libraries scanned: 36
Scan token: 26bb4275b58d4fc385e6cdfe80432ca3