maven-model-4.0.0-alpha-6-SNAPSHOT.jar: 1 vulnerabilities (highest severity is: 9.8) [master]

[mend-developer-platform-dev]

📂 Vulnerable Library - maven-model-4.0.0-alpha-6-SNAPSHOT.jar

Path to dependency file: /maven-resolver-provider/pom.xml

Path to vulnerable library: /maven-model/4.0.0-alpha-6-SNAPSHOT/maven-model-4.0.0-alpha-6-SNAPSHOT.jar

Findings

Finding	Severity	🎯 CVSS	Exploit Maturity	EPSS	Library	Type	Fixed in	Remediation Available	Reachability
CVE-600093-79027	🟣 Critical	9.8	N/A	N/A	javax.annotation-api-1.3.2.jar	Transitive	N/A	❌

Details

🟣CVE-600093-79027

Vulnerable Library - javax.annotation-api-1.3.2.jar

Common Annotations for the JavaTM Platform API

Library home page: https://javaee.github.io/glassfish

Path to dependency file: /maven-settings-builder/pom.xml

Path to vulnerable library: /home/wss-scanner/.m2/repository/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar

Dependency Hierarchy:

• org.eclipse.sisu.plexus-0.3.5.jar (Root Library)

  • ❌ javax.annotation-api-1.3.2.jar (Vulnerable Library)

• maven-xml-impl-4.0.0-alpha-6-SNAPSHOT.jar (Root Library)

  • org.eclipse.sisu.plexus-0.3.5.jar
    • ❌ javax.annotation-api-1.3.2.jar (Vulnerable Library)

• maven-model-4.0.0-alpha-6-SNAPSHOT.jar (Root Library)

  • maven-xml-impl-4.0.0-alpha-6-SNAPSHOT.jar
    • org.eclipse.sisu.plexus-0.3.5.jar
      • ❌ javax.annotation-api-1.3.2.jar (Vulnerable Library)

• maven-toolchain-model-4.0.0-alpha-6-SNAPSHOT.jar (Root Library)

  • maven-xml-impl-4.0.0-alpha-6-SNAPSHOT.jar
    • org.eclipse.sisu.plexus-0.3.5.jar
      • ❌ javax.annotation-api-1.3.2.jar (Vulnerable Library)

• maven-settings-4.0.0-alpha-6-SNAPSHOT.jar (Root Library)

  • maven-xml-impl-4.0.0-alpha-6-SNAPSHOT.jar
    • org.eclipse.sisu.plexus-0.3.5.jar
      • ❌ javax.annotation-api-1.3.2.jar (Vulnerable Library)

---

Vulnerability Details

Created automatically by the test suite

Publish Date: Jun 07, 2010 05:12 PM

URL: CVE-600093-79027

Threat Assessment

Exploit Maturity:N/A

EPSS:N/A

Score: 9.8

---

Suggested Fix

Type: Upgrade version

Origin:

Release Date:

Fix Resolution :