Dublin UUI Security/Vulnerability Report

Owned by Amy Zwarico
Jun 03, 2019
1 min read

This table represents the known exploitable and non-exploitable vulnerabilities in third party packages used in the project.



Repository

Group

Impact Analysis

Action

Repository

Group

Impact Analysis

Action

usecase-ui-server

com.eclipsesource.jaxrs

False Positive

Pulled in by Springboot, indirect dependency.

No Action

usecase-ui-server

org.apache.tomcat.embed

False Positive

Pulled in by Springboot, indirect dependency.

No Action

usecase-ui-server

com.fasterxml.jackson.core

False Positive

Explaination: This vulnerability issue only exists if com.fasterxml.jackson.databind.ObjectMapper.setDefaultTyping() is called before it is used for deserialization.

usecase-ui server doesn't invoke this method.

No Action

usecase-ui-server

dom4j

False Positive

Pulled in by Springboot, indirect dependency.

No Action

usecase-ui-server

org.jboss.netty

False positive

Pulled in by Springboot, indirect dependency.

No Action

usecase-ui-server

postgresql

All of the existing versions have vulnerabilities issues.

Request exception

usecase-ui-server

commons-codec

False positive

Pulled in by Springboot, indirect dependency.

No Action

usecase-ui-server

org.springframework.data

No analysis provided by the project

Unknown