Multiple security vulnerabilities
sdavids opened this issue · 6 comments
Reported by OWASP dependency-check Analyse
One or more dependencies were identified with known vulnerabilities:
docker-java-shaded-3.0.14.jar (com.aries:docker-java-shaded:3.0.14, cpe:/a:docker:docker:3.0.14) : CVE-2017-7297
docker-java-shaded-3.0.14.jar/META-INF/maven/com.fasterxml.jackson.core/jackson-databind/pom.xml (com.fasterxml.jackson.core:jackson-databind:2.6.4, cpe:/a:fasterxml:jackson-databind:2.6.4, cpe:/a:fasterxml:jackson:2.6.4) : CVE-2017-15095, CVE-2017-17485, CVE-2017-7525, CVE-2018-5968, CVE-2018-7489
docker-java-shaded-3.0.14.jar/META-INF/maven/com.github.docker-java/docker-java/pom.xml (com.github.docker-java:docker-java:3.0.14, cpe:/a:docker:docker:3.0.14) : CVE-2017-7297
@sdavids have you reported this to the docker-java project? This project builds on top of theirs and so the fix would need to go into that project lest we want to start having differing dependencies here and break with them which can cause all sorts of fun issues :)
Closing issue. Feel free to re-open should you like to talk further.
This should remain open.
When upstream is fixed your dependency should be updated and then this issue should be closed.
Closing as 3.1.1 has been released.