Vulnerabilities

 2 via 4 paths

Dependencies

 22

Source

 GitHub

Commit

 develop

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Severity
  • 1
  • 1
Status
  • 2
  • 0
  • 0

high severity

Uncontrolled Recursion

  • Vulnerable module: org.apache.commons:commons-lang3
  • Introduced through: de.vandermeer:asciitable@0.3.2

Detailed paths

  • Introduced through: delphi-hub/delphi-cli@delphi-hub/delphi-cli#develop › de.vandermeer:asciitable@0.3.2 › de.vandermeer:ascii-utf-themes@0.0.1 › de.vandermeer:skb-interfaces@0.0.1 › org.apache.commons:commons-lang3@3.4
  • Introduced through: delphi-hub/delphi-cli@delphi-hub/delphi-cli#develop › de.vandermeer:asciitable@0.3.2 › de.vandermeer:char-translation@0.0.2 › de.vandermeer:skb-interfaces@0.0.1 › org.apache.commons:commons-lang3@3.4

Overview

Affected versions of this package are vulnerable to Uncontrolled Recursion via the ClassUtils.getClass function. An attacker can cause the application to terminate unexpectedly by providing excessively long input values.

Remediation

Upgrade org.apache.commons:commons-lang3 to version 3.18.0 or higher.

References

Uncontrolled Recursion vulnerability report

low severity

Information Exposure

  • Vulnerable module: junit:junit
  • Introduced through: de.vandermeer:asciitable@0.3.2

Detailed paths

  • Introduced through: delphi-hub/delphi-cli@delphi-hub/delphi-cli#develop › de.vandermeer:asciitable@0.3.2 › de.vandermeer:ascii-utf-themes@0.0.1 › de.vandermeer:skb-interfaces@0.0.1 › org.antlr:ST4@4.0.8 › org.antlr:antlr-runtime@3.5.2 › junit:junit@4.10
    Remediation: Upgrade to de.vandermeer:asciitable@0.3.2.
  • Introduced through: delphi-hub/delphi-cli@delphi-hub/delphi-cli#develop › de.vandermeer:asciitable@0.3.2 › de.vandermeer:char-translation@0.0.2 › de.vandermeer:skb-interfaces@0.0.1 › org.antlr:ST4@4.0.8 › org.antlr:antlr-runtime@3.5.2 › junit:junit@4.10
    Remediation: Upgrade to de.vandermeer:asciitable@0.3.2.

Overview

junit:junit is an unit testing framework for Java

Affected versions of this package are vulnerable to Information Exposure. The JUnit4 test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by default, readable by other users on that same system.

Note: This vulnerability does not allow other users to overwrite the contents of these directories or files. This only affects Unix like systems.

Remediation

Upgrade junit:junit to version 4.13.1 or higher.

References

Information Exposure vulnerability report