Project

General

Profile

Actions
Copy link

Bug #21907

open

Ignore reported batik-css CVE

Added by Alexis Mousset about 2 years ago. Updated 6 months ago.

Status:
Pending release
Priority:
N/A
Assignee:
François ARMAND
Category:
Security
Target version:
7.1
Pull Request:
https://github.com/Normation/rudder-p...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

https://nvd.nist.gov/vuln/detail/CVE-2022-40146 is a false positive as antisamy only uses batik-css which does not depend on the affected package https://security.snyk.io/vuln/maven/?search=batik.

Subtasks 1 (0 open — 1 closed)

Bug #21908: Ignore reported batik-util CVEReleasedVincent MEMBRÉActions
Actions
Copy link
 #1

Updated by Alexis Mousset about 2 years ago

  • Status changed from New to In progress
  • Assignee set to Alexis Mousset
Actions
Copy link
 #2

Updated by Alexis Mousset about 2 years ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Alexis Mousset to François ARMAND
  • Pull Request set to https://github.com/Normation/rudder-plugins/pull/505
Actions
Copy link
 #3

Updated by Alexis Mousset about 2 years ago

  • Status changed from Pending technical review to Pending release
Actions
Copy link
 #4

Updated by Alexis Mousset about 2 years ago

  • Subtask #21908 added
Actions
Copy link

Also available in: Atom PDF