You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/multiple-tests/all-patterns/results.xml
+6Lines changed: 6 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -21,6 +21,12 @@
21
21
message="Insecure dependency maven/org.apache.logging.log4j/[email protected] (CVE-2021-44832: log4j-core: remote code execution via JDBC Appender) (update to 2.17.1)"
22
22
severity="warning"
23
23
/>
24
+
<error
25
+
source="vulnerability_medium"
26
+
line="1"
27
+
message="Insecure dependency maven/org.apache.logging.log4j/[email protected] (CVE-2025-68161: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2. ...) (update to 2.25.3)"
Copy file name to clipboardExpand all lines: docs/multiple-tests/pattern-vulnerability-critical/results.xml
+6Lines changed: 6 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -7,6 +7,12 @@
7
7
message="Insecure dependency golang/[email protected] (CVE-2024-24790: golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses) (update to 1.21.11)"
8
8
severity="error"
9
9
/>
10
+
<error
11
+
source="vulnerability_critical"
12
+
line="8"
13
+
message="Insecure dependency golang/github.com/ollama/[email protected] (CVE-2025-63389: Ollama Platform has missing authentication enabling attackers to perform model management operations) (no fix available)"
Copy file name to clipboardExpand all lines: docs/multiple-tests/pattern-vulnerability-high/results.xml
+2-8Lines changed: 2 additions & 8 deletions
Original file line number
Diff line number
Diff line change
@@ -85,19 +85,13 @@
85
85
<error
86
86
source="vulnerability_high"
87
87
line="5"
88
-
message="Insecure dependency golang/[email protected] (CVE-2025-58186: Despite HTTP headers having a default limit of 1MB, the number of cook ...) (update to 1.24.8)"
89
-
severity="high"
90
-
/>
91
-
<error
92
-
source="vulnerability_high"
93
-
line="5"
94
-
message="Insecure dependency golang/[email protected] (CVE-2025-58187: Due to the design of the name constraint checking algorithm, the proce ...) (update to 1.24.9)"
88
+
message="Insecure dependency golang/[email protected] (CVE-2025-58183: golang: archive/tar: Unbounded allocation when parsing GNU sparse map) (update to 1.24.8)"
95
89
severity="high"
96
90
/>
97
91
<error
98
92
source="vulnerability_high"
99
93
line="5"
100
-
message="Insecure dependency golang/[email protected] (CVE-2025-58183: golang: archive/tar: Unbounded allocation when parsing GNU sparse map) (update to 1.24.8)"
94
+
message="Insecure dependency golang/[email protected] (CVE-2025-61729: crypto/x509: Excessive resource consumption when printing error string for host certificate validation in crypto/x509) (update to 1.24.11)"
Copy file name to clipboardExpand all lines: docs/multiple-tests/pattern-vulnerability-medium/results.xml
+30Lines changed: 30 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -170,9 +170,33 @@
170
170
message="Insecure dependency golang/[email protected] (CVE-2025-58188: crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509) (update to 1.24.8)"
171
171
severity="warning"
172
172
/>
173
+
<error
174
+
source="vulnerability_medium"
175
+
line="3"
176
+
message="Insecure dependency golang/[email protected] (CVE-2025-58186: golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http) (update to 1.24.8)"
177
+
severity="warning"
178
+
/>
179
+
<error
180
+
source="vulnerability_medium"
181
+
line="3"
182
+
message="Insecure dependency golang/[email protected] (CVE-2025-58187: crypto/x509: Quadratic complexity when checking name constraints in crypto/x509) (update to 1.24.9)"
183
+
severity="warning"
184
+
/>
185
+
<error
186
+
source="vulnerability_medium"
187
+
line="3"
188
+
message="Insecure dependency golang/[email protected] (CVE-2025-61727: golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs) (update to 1.24.11)"
189
+
severity="warning"
190
+
/>
173
191
</file>
174
192
175
193
<filename="gradle/gradle.lockfile">
194
+
<error
195
+
source="vulnerability_medium"
196
+
line="1"
197
+
message="Insecure dependency maven/org.apache.logging.log4j/[email protected] (CVE-2025-68161: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2. ...) (update to 2.25.3)"
198
+
severity="warning"
199
+
/>
176
200
<error
177
201
source="vulnerability_medium"
178
202
line="1"
@@ -188,6 +212,12 @@
188
212
message="Insecure dependency maven/org.apache.logging.log4j/[email protected] (CVE-2021-44832: log4j-core: remote code execution via JDBC Appender) (update to 2.17.1)"
189
213
severity="warning"
190
214
/>
215
+
<error
216
+
source="vulnerability_medium"
217
+
line="14"
218
+
message="Insecure dependency maven/org.apache.logging.log4j/[email protected] (CVE-2025-68161: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2. ...) (update to 2.25.3)"
0 commit comments