alibaba / alibaba/cloud-native-app-initializer
When creating a project using images, my IDE displays two vulnerability prompts
- Dominant language
- Java
- Stars
- 308
- Forks
- 107
- PR merge metrics
- No merged PRs in 30d
Description
When using a dependency on spring boot starter, a vulnerability is prompted in CVE-2023-6378;
When using a dependency on spring boot starter test, a vulnerability CVE-2023-1370 is indicated.
Although I can ignore these prompts, I want to know what I need to do to eliminate them?
environment:
IDE:IntelliJ IDEA 2023.2.5
language: java
springboot: 2.7.6
type: maven
jdk: 1.8
packaging: jar
Contributor guide
Research direction
No files, tests, or entry points are identified in the issue. Reproduce the generated Maven project with Spring Boot 2.7.6 and inspect the dependency tree for CVE-2023-6378 and CVE-2023-1370; done means the generated project no longer triggers these vulnerability prompts or clearly documents an unavoidable exception.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring-boot
- Domain
- build-system, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100