Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 2.x] Fix hdfs-fixture kerb-admin & hadoop-minicluster dependencies are not being updated / false positive reports on CVEs #14731

Merged
merged 1 commit into from
Jul 11, 2024

Fix hdfs-fixture kerb-admin & hadoop-minicluster dependencies are not…

1d8d51f
Select commit
Loading
Failed to load commit list.
Merged

[Backport 2.x] Fix hdfs-fixture kerb-admin & hadoop-minicluster dependencies are not being updated / false positive reports on CVEs #14731

Fix hdfs-fixture kerb-admin & hadoop-minicluster dependencies are not…
1d8d51f
Select commit
Loading
Failed to load commit list.
Mend for GitHub.com / Mend Security Check succeeded Jul 11, 2024 in 21m 47s

Security Report

✔️ 👍 You have successfully remediated 3 vulnerabilities in this branch:

CVE Vulnerable Library
CVE-2024-29131 commons-configuration2-2.8.0.jar
CVE-2024-29133 commons-configuration2-2.8.0.jar
CVE-2023-52428 nimbus-jose-jwt-9.31.jar

Base branch total remaining vulnerabilities: 3
Base branch commit: 82bffb1d506366f952c813e349ce41dc037fde46


Total libraries scanned: 15

Scan token: 5d2257f3264647ee85f0d481f0404699

View more details on Mend for GitHub.com