Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnerable dependencies #216

Open
freedom1b2830 opened this issue Dec 30, 2022 · 0 comments
Open

Vulnerable dependencies #216

freedom1b2830 opened this issue Dec 30, 2022 · 0 comments

Comments

@freedom1b2830
Copy link

useful tools:
https://github.com/google/osv-scanner

mvn versions:display-dependency-updates
mvn versions:display-plugin-updates

dependencies:

GHSA-269g-pwp5-87pp
GHSA-cj7v-27pg-wf7q
GHSA-26vr-8j45-3r4w


https://osv.dev/vulnerability/GHSA-269g-pwp5-87pp	junit:junit                  4.12            bt/bt-dht/the8472/mldht/pom.xml
https://osv.dev/vulnerability/GHSA-cj7v-27pg-wf7q	org.eclipse.jetty:jetty-http 8.2.0.v20160908 bt/bt-upnp/pom.xml             
https://osv.dev/vulnerability/GHSA-26vr-8j45-3r4w	org.eclipse.jetty:jetty-io   8.2.0.v20160908 bt/bt-upnp/pom.xml

Other dependencies (there are new versions, there is no information about the vulnerability):

Be careful with jetty, it's hard to update it)
https://www.eclipse.org/jetty/security_reports.php

all:

----------------< com.github.atomashpolskiy:bt-parent >-----------------
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6

---------------< com.github.atomashpolskiy:bt-bencoding >---------------
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6
org.yaml:snakeyaml ...................................... 1.17 -> 1.33
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
junit:junit ........................................... 4.12 -> 4.13.2
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.yaml:snakeyaml ...................................... 1.17 -> 1.33

-----------------< com.github.atomashpolskiy:bt-core >------------------
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6

----------< com.github.atomashpolskiy:bt-http-tracker-client >----------
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
org.apache.httpcomponents:httpclient ................ 4.5.13 -> 4.5.14
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6
junit:junit ........................................... 4.12 -> 4.13.2
org.apache.httpcomponents:httpclient ................ 4.5.13 -> 4.5.14
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta

------------------------< mldht.core:libmldht >-------------------------
junit:junit ........................................... 4.12 -> 4.13.2
net.i2p.crypto:eddsa .................................. 0.2.0 -> 0.3.0
org.codehaus.plexus:plexus-compiler-eclipse ............ 2.5 -> 2.13.0



-----------------< com.github.atomashpolskiy:bt-tests >-----------------
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6

--------------< com.github.atomashpolskiy:bt-dht-parent >---------------
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6

------------------< com.github.atomashpolskiy:bt-dht >------------------
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6

-----------------< com.github.atomashpolskiy:bt-upnp >------------------
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6
org.eclipse.jetty:jetty-client ...... 8.2.0.v20160908 -> 12.0.0.alpha3
org.eclipse.jetty:jetty-http ........ 8.2.0.v20160908 -> 12.0.0.alpha3
org.eclipse.jetty:jetty-io .......... 8.2.0.v20160908 -> 12.0.0.alpha3
org.eclipse.jetty:jetty-servlet ........... 8.2.0.v20160908 -> 11.0.13
org.eclipse.jetty:jetty-util ........ 8.2.0.v20160908 -> 12.0.0.alpha3

------------------< com.github.atomashpolskiy:bt-cli >------------------
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6
com.googlecode.lanterna:lanterna ............... 3.1.1 -> 3.2.0-alpha1
net.sf.jopt-simple:jopt-simple .................. 5.0.2 -> 6.0-alpha-3
org.apache.logging.log4j:log4j-core ................. 2.17.0 -> 2.19.0
org.apache.logging.log4j:log4j-slf4j-impl ........... 2.17.0 -> 2.19.0
org.slf4j:jul-to-slf4j ............................... 1.7.32 -> 2.0.6

-----------------< com.github.atomashpolskiy:examples >-----------------
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
org.apache.logging.log4j:log4j-core ................. 2.17.0 -> 2.19.0
org.apache.logging.log4j:log4j-slf4j-impl ........... 2.17.0 -> 2.19.0

--------------< com.github.atomashpolskiy:jacoco-report >---------------
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6

summary info:

com.googlecode.lanterna:lanterna ............... 3.1.1 -> 3.2.0-alpha1
com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
com.google.inject:guice ............................... 5.0.1 -> 5.1.0
com.google.jimfs:jimfs .................................... 1.1 -> 1.2
junit:junit ........................................... 4.12 -> 4.13.2
net.i2p.crypto:eddsa .................................. 0.2.0 -> 0.3.0
net.sf.jopt-simple:jopt-simple .................. 5.0.2 -> 6.0-alpha-3
org.apache.httpcomponents:httpclient ................ 4.5.13 -> 4.5.14
org.apache.logging.log4j:log4j-core ................. 2.17.0 -> 2.19.0
org.apache.logging.log4j:log4j-slf4j-impl ........... 2.17.0 -> 2.19.0
org.codehaus.plexus:plexus-compiler-eclipse ............ 2.5 -> 2.13.0
org.eclipse.jetty:jetty-client ...... 8.2.0.v20160908 -> 12.0.0.alpha3
org.eclipse.jetty:jetty-http ........ 8.2.0.v20160908 -> 12.0.0.alpha3
org.eclipse.jetty:jetty-io .......... 8.2.0.v20160908 -> 12.0.0.alpha3
org.eclipse.jetty:jetty-servlet ........... 8.2.0.v20160908 -> 11.0.13
org.eclipse.jetty:jetty-util ........ 8.2.0.v20160908 -> 12.0.0.alpha3
org.mockito:mockito-all ........................ 1.10.19 -> 2.0.2-beta
org.slf4j:jul-to-slf4j ............................... 1.7.32 -> 2.0.6
org.slf4j:slf4j-api .................................. 1.7.32 -> 2.0.6
org.slf4j:slf4j-simple ............................... 1.7.32 -> 2.0.6
org.yaml:snakeyaml ...................................... 1.17 -> 1.33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@freedom1b2830