Update dependency org.webjars:bootstrap to v4 #54
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|
CVE-2019-8331Path to dependency file: /webwolf/pom.xml Path to vulnerable library: /webwolf/pom.xml Dependency Hierarchy: -> ❌ bootstrap-4.1.2.jar (Vulnerable Library) |
 Medium |
6.1 | Direct bootstrap-4.1.2.jar |
bootstrap-4.1.2.jar | 4.3.1 | None |
CVE-2023-34055Dependency Hierarchy: -> webgoat-container-8.2.1-SNAPSHOT.jar (Root Library) -> spring-boot-starter-actuator-2.4.3.jar -> spring-boot-actuator-autoconfigure-2.4.3.jar -> ❌ spring-boot-actuator-2.4.3.jar (Vulnerable Library) |
Medium |
5.3 | Transitive spring-boot-actuator-2.4.3.jar |
webgoat-container-8.2.1-SNAPSHOT.jar | Transitive org.springframework.boot:spring-boot-actuator:2.7.18,3.0.13,3.1.6 |
#33 |
CVE-2023-34055Dependency Hierarchy: -> spring-boot-starter-actuator-2.4.3.jar (Root Library) -> spring-boot-actuator-autoconfigure-2.4.3.jar -> ❌ spring-boot-actuator-2.4.3.jar (Vulnerable Library) |
Medium |
5.3 | Transitive spring-boot-actuator-2.4.3.jar |
spring-boot-starter-actuator-2.4.3.jar | Transitive org.springframework.boot:spring-boot-actuator:2.7.18,3.0.13,3.1.6 |
#31 |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2020-11023 | jquery-2.1.4.min.js |
| CVE-2018-20676 | bootstrap-3.3.7.jar |
| CVE-2019-11358 | jquery-2.1.4.min.js |
| CVE-2018-14040 | bootstrap-3.3.7.jar |
| CVE-2018-14042 | bootstrap-3.3.7.jar |
| CVE-2018-20677 | bootstrap-3.3.7.jar |
| CVE-2015-9251 | jquery-2.1.4.min.js |
| CVE-2019-8331 | bootstrap-3.3.7.jar |
| CVE-2020-11022 | jquery-2.1.4.min.js |
| CVE-2016-10735 | bootstrap-3.3.7.jar |
Base branch total remaining vulnerabilities: 211
Base branch commit: null
Total libraries scanned: 189
Scan token: c24c921417814c1f8597f399a85ccca7