Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] 依赖的组件存在缺陷,能否更新下有缺陷的版本? #6221

Open
dipwater opened this issue Nov 7, 2024 · 1 comment
Open

Comments

@dipwater
Copy link

dipwater commented Nov 7, 2024

Database Type

MySQL

Database Version

MySQL 8.0.23

Druid Version

1.2.23

JDK Version

JDK8

Error SQL

https://mvnrepository.com/artifact/com.alibaba/druid/1.2.23 查到存在以下依赖缺陷:
CVE-2024-38816
CVE-2024-1597
CVE-2023-2976
CVE-2023-22102
CVE-2022-46337
CVE-2022-45868
CVE-2022-41946
CVE-2022-39135
CVE-2022-31197
CVE-2022-26520
CVE-2022-24969
CVE-2022-23307
CVE-2022-23305
CVE-2022-23302
CVE-2022-23221
CVE-2022-22970
CVE-2022-22965
CVE-2022-21724
CVE-2021-44832
CVE-2021-42392
CVE-2021-4104
CVE-2021-30181
CVE-2021-30179
CVE-2021-25641
CVE-2021-25640
CVE-2021-23463
CVE-2020-8908
CVE-2020-26945
CVE-2019-17571
CVE-2018-1313

Testcase Code

No response

Stacktrace Info

No response

Error Info

No response

@linghengqian
Copy link

Provided Dependencies and Test Dependencies are not propagated to downstream projects unless you explicitly depend on those dependencies with CVE. Feel free to consult the Maven documentation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants