Skip to content
This repository was archived by the owner on Jan 7, 2026. It is now read-only.

GHSA-wxr5-93ph-8wr9/adv update #19004

Merged
bentasker merged 1 commit into from
May 30, 2025
Merged

GHSA-wxr5-93ph-8wr9/adv update #19004

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions sonarqube-10.advisories.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -378,6 +378,10 @@ advisories:
componentType: java-archive
componentLocation: /usr/share/sonarqube/lib/extensions/sonar-iac-plugin-1.46.0.15097.jar
scanner: grype
- timestamp: 2025-05-30T00:15:34Z
type: pending-upstream-fix
data:
note: The commons-beanutil dependency that exists in the sonarqube-10 package is brought in as a transitive dependency from sonar-iac-plugin-1.46.0.15097.jar, sonar-php-plugin-3.45.0.12991.jar, sonar-scanner-engine-shaded-25.5.0.107428-all.jar, and sonar-application-25.5.0.107428.jar . This dependency is not able to be upgraded to a higher version and requires upstream maintainers to implement.

- id: CGA-pv4v-pp6h-6rfh
aliases:
Expand Down
Loading