Update README.md

[cx-nitzan-massader]

No description provided.

[cx-nitzan-massader]

Checkmarx One – Scan Summary & Details – dd7c803f-8207-47bf-9025-b7b430844ad5

Policy Management Violations - Pull/merge request blocked

Policy Name	Rule(s)	Break Build
Test Policy	New vulnerabilities of Critical, High, Medium and Low severity levels detected	true

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	SQL_Injection	/encode.frm: 42	Attack Vector
	SQL_Injection	/encode.frm: 41	Attack Vector
	CVE-2015-2575	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	CVE-2017-3523	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	CVE-2018-3258	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	Cx039cb67c-ead3	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	Cx6f651376-312a	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	Cx7ef609d2-efb5	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Add Instead of Copy	/Dockerfile: 8	Using ADD to load external installation scripts could lead to an evil web server leveraging this and loading a malicious script.
	Add Instead of Copy	/Dockerfile: 7	Using ADD to load external installation scripts could lead to an evil web server leveraging this and loading a malicious script.
	CVE-2017-3586	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	CVE-2019-11358	Npm-jquery-3.2.1	Vulnerable Package
	CVE-2019-2692	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	CVE-2020-11022	Npm-jquery-3.2.1	Vulnerable Package
	CVE-2020-11023	Npm-jquery-3.2.1	Vulnerable Package
	CVE-2020-15250	Maven-junit:junit-4.10	Vulnerable Package
	CVE-2020-2875	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	CVE-2020-2934	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	CVE-2021-2471	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	CVE-2022-21363	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	CVE-2024-34517	Maven-org.neo4j:neo4j-cypher-1.8.1	Vulnerable Package
	Hardcoded_password_in_Connection_String	/encode.frm: 67	Attack Vector
	Image Version Using 'latest'	/Dockerfile: 1	When building images, always tag them with useful tags which codify version information, intended destination (prod or test, for instance), stabili...
	Parameter_Tampering	/encode.frm: 65	Attack Vector
	Privacy_Violation	/encode.frm: 42	Attack Vector
	Privacy_Violation	/encode.frm: 11	Attack Vector
	Unpinned Package Version in Apk Add	/Dockerfile: 1	Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
	CVE-2017-3589	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	CVE-2020-2933	Maven-mysql:mysql-connector-java-5.1.18	Vulnerable Package
	Curl or Wget Instead of Add	/Dockerfile: 8	Use of Curl or Wget should be done instead of Add to fetch packages from remote URLs due to the use of Add being strongly discouraged
	Curl or Wget Instead of Add	/Dockerfile: 7	Use of Curl or Wget should be done instead of Add to fetch packages from remote URLs due to the use of Add being strongly discouraged
	Healthcheck Instruction Missing	/Dockerfile: 1	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working
	MAINTAINER Instruction Being Used	/Dockerfile: 2	The MAINTAINER instruction sets the Author field of the generated images. The LABEL instruction is a much more flexible version of this and you sho...
	Multiple RUN, ADD, COPY, Instructions Listed	/Dockerfile: 7	Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.