[jira] [Assigned] (ZOOKEEPER-4662) OWASP is failing on the zookeeper-it module due false positives about JUnit CVEs

["Enrico Olivelli (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/ZOOKEEPER-4662?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Enrico Olivelli reassigned ZOOKEEPER-4662:
------------------------------------------

    Assignee: Enrico Olivelli

> OWASP is failing on the zookeeper-it module due false positives about JUnit CVEs
> --------------------------------------------------------------------------------
>
>                 Key: ZOOKEEPER-4662
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4662
>             Project: ZooKeeper
>          Issue Type: Test
>          Components: tests
>    Affects Versions: 3.8.0
>            Reporter: Enrico Olivelli
>            Assignee: Enrico Olivelli
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.9.0, 3.8.1, 3.7.2
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
>  
> {code:java}
> [ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '0.0': 
> [ERROR] 
> [ERROR] junit-4.13.jar: CVE-2020-15250(5.5)
> [ERROR] junit-platform-engine-1.6.2.jar: CVE-2022-31514(9.3)
> [ERROR] 
> [ERROR] See the dependency-check report for more details.
> {code}
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)