alibaba / alibaba/cloud-native-app-initializer

When creating a project using images, my IDE displays two vulnerability prompts

Open
#96 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
308
Forks
107
PR merge metrics
No merged PRs in 30d

Description

When using a dependency on spring boot starter, a vulnerability is prompted in CVE-2023-6378;
When using a dependency on spring boot starter test, a vulnerability CVE-2023-1370 is indicated.
Although I can ignore these prompts, I want to know what I need to do to eliminate them?

environment:
IDE:IntelliJ IDEA 2023.2.5
language: java
springboot: 2.7.6
type: maven
jdk: 1.8
packaging: jar

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are identified in the issue. Reproduce the generated Maven project with Spring Boot 2.7.6 and inspect the dependency tree for CVE-2023-6378 and CVE-2023-1370; done means the generated project no longer triggers these vulnerability prompts or clearly documents an unavoidable exception.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, spring-boot
Domain
build-system, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.