Each project will update the vulnerable direct dependencies in their code base following the recommendations of SECCOM documented in the spreadsheet  

MasterReportOslo_07-01-24.xlsx

on the Oslo Package Updates - Security Vulnerabilities - Confluence (onap.org)

page in the protected Security Vulnerabilities space.

Each project will find the update recommendations in their project tab in the spreadsheet.

SECCOM will upload a status spreadsheet each week to help projects track their status.

Submit a LF Ticket for access to the Security Vulnerabilities space.