[jira] [Commented] (MSHARED-1133) Switch to JUnit 5 and drop junit-addons

["Hudson (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/MSHARED-1133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17602916#comment-17602916 ] 

Hudson commented on MSHARED-1133:
---------------------------------

Build succeeded in Jenkins: Maven » Maven TLP » maven-reporting-impl » master #30

See https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-reporting-impl/job/master/30/

> Switch to JUnit 5 and drop junit-addons
> ---------------------------------------
>
>                 Key: MSHARED-1133
>                 URL: https://issues.apache.org/jira/browse/MSHARED-1133
>             Project: Maven Shared Components
>          Issue Type: Dependency upgrade
>          Components: maven-reporting-impl
>            Reporter: Sylwester Lachiewicz
>            Assignee: Sylwester Lachiewicz
>            Priority: Minor
>             Fix For: maven-reporting-impl-4.0.0-M3
>
>
> fixes bellow reported issues in tests
> Provides transitive vulnerable dependency xerces:xercesImpl:2.6.2
> CVE-2012-0881 7.5 Vulnerability with medium severity found
> CVE-2018-2799 5.3 Uncontrolled Resource Consumption vulnerability pending CVSS allocation
> CVE-2013-4002 7.1 Uncontrolled Resource Consumption vulnerability pending CVSS allocation
> CVE-2020-14338 5.3 Improper Input Validation vulnerability pending CVSS allocation
> CVE-2009-2625 5.0 Vulnerability with medium severity found
> CVE-2017-10355 5.3 Uncontrolled Resource Consumption vulnerability pending CVSS allocation
> CVE-2022-23437 6.5 XML Injection (aka Blind XPath Injection) vulnerability pending CVSS allocation
> Results powered by Checkmarx(c)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)