Project

General

Profile

Actions

Bug #19425

closed

False-positive vulnerability in cve dependencies

Added by Alexis Mousset almost 3 years ago. Updated over 2 years ago.

Status:
Released
Priority:
N/A
Category:
Packaging
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:

Description

The detected vulnerability is:

refined_2.13-0.9.20.jar: CVE-2021-34364

which affects a browser extension (https://github.com/sindresorhus/refined-github) and not a scala lib (https://github.com/fthomas/refined)

Actions

Also available in: Atom PDF