Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[CVE] json-path flagged in CVE-2024-57699 - autoclosed #1222

Closed
martin-gaievski opened this issue Mar 11, 2025 · 1 comment
Closed

[CVE] json-path flagged in CVE-2024-57699 - autoclosed #1222

martin-gaievski opened this issue Mar 11, 2025 · 1 comment
Labels
bug Something isn't working Mend: dependency security vulnerability

Comments

@martin-gaievski
Copy link
Member

martin-gaievski commented Mar 11, 2025 •
edited
Loading

What is the bug?

json-path 2.9.0 library has been flagged in CVE-2024-57699, neural-search uses it directly in two build.gradle files.
@martin-gaievski martin-gaievski changed the title [CVE] json-smart 2.5.0 flagged in https://advisories.opensearch.org/advisories/CVE-2024-57699 [CVE] json-path flagged in https://advisories.opensearch.org/advisories/CVE-2024-57699 Mar 11, 2025
@martin-gaievski martin-gaievski mentioned this issue Mar 11, 2025
Merged
1 task
@martin-gaievski martin-gaievski changed the title [CVE] json-path flagged in https://advisories.opensearch.org/advisories/CVE-2024-57699 [CVE] json-path flagged in CVE-2024-57699 Mar 11, 2025
@mend-for-github-com mend-for-github-com bot changed the title [CVE] json-path flagged in CVE-2024-57699 [CVE] json-path flagged in CVE-2024-57699 - autoclosed Mar 11, 2025
@mend-for-github-com Mend for GitHub.com
Copy link
Contributor

✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working Mend: dependency security vulnerability
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@martin-gaievski