sz-lk-purchase-plan-app.tar (alt cpe:/o:alt:spcontainer:10.2.2) - Trivy Report - 2026-10-23 07:37:15.139618414 +0000 UTC m=+16.738892093

alt
No Vulnerabilities found
No Misconfigurations found
jar
Package Vulnerability ID Severity Installed Version Fixed Version Links
at.yawk.lz4:lz4-java CVE-2026-106451 HIGH 1.11.1 1.11.4
at.yawk.lz4:lz4-java CVE-2026-106450 MEDIUM 1.11.1 1.11.4
at.yawk.lz4:lz4-java CVE-2026-106452 MEDIUM 1.11.1 1.11.2
at.yawk.lz4:lz4-java CVE-2026-106453 MEDIUM 1.11.1 1.11.2
at.yawk.lz4:lz4-java CVE-2026-106449 LOW 1.11.1 1.11.4
com.fasterxml.jackson.core:jackson-core CVE-2026-89407 HIGH 2.21.4 2.18.11, 2.21.7, 2.22.3
com.fasterxml.jackson.core:jackson-core CVE-2026-89425 HIGH 2.21.4 2.21.7, 2.22.3, 2.18.11
com.fasterxml.jackson.core:jackson-databind CVE-2026-68497 HIGH 2.18.9 2.18.10, 2.21.6, 2.22.2
com.fasterxml.jackson.core:jackson-databind CVE-2026-91776 HIGH 2.18.9 2.18.11, 2.21.7, 2.22.3
com.fasterxml.jackson.core:jackson-databind CVE-2026-91777 HIGH 2.18.9 2.21.7, 2.18.11, 2.22.3
com.fasterxml.jackson.core:jackson-databind CVE-2026-19032 MEDIUM 2.18.9 2.18.10, 2.21.6, 2.22.2
com.fasterxml.jackson.core:jackson-databind CVE-2026-83557 MEDIUM 2.18.9 2.18.10, 2.21.6, 2.22.2
io.netty:netty-codec-http CVE-2026-59903 MEDIUM 4.1.136.Final 4.2.17.Final, 4.1.137.Final
io.netty:netty-handler CVE-2026-75595 CRITICAL 4.1.136.Final 4.2.17.Final, 4.1.137.Final
io.netty:netty-handler CVE-2026-75596 MEDIUM 4.1.136.Final 4.2.17.Final, 4.1.137.Final
net.sf.jasperreports:jasperreports CVE-2025-10492 HIGH 6.21.5 7.0.4
net.sf.jasperreports:jasperreports CVE-2026-6009 HIGH 6.21.5 7.0.7
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 MEDIUM 5.5.2 5.6.3
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 HIGH 5.3.6 5.4.3, 5.5-beta2
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 HIGH 5.3.6 5.4.3, 5.5-beta2
org.apache.logging.log4j:log4j-api CVE-2026-49844 MEDIUM 2.24.3 2.25.5, 2.26.1
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-65182 CRITICAL 10.1.55 11.0.25, 10.1.58, 9.0.121
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-65905 CRITICAL 10.1.55 11.0.25, 10.1.58, 9.0.121
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-68525 CRITICAL 10.1.55 11.0.25, 10.1.58, 9.0.121
org.bouncycastle:bcprov-jdk18on CVE-2026-8763 CRITICAL 1.84 1.85
org.bouncycastle:bcprov-jdk18on CVE-2026-13506 HIGH 1.84 1.85
org.springframework:spring-webflux CVE-2026-47890 CRITICAL 6.2.19 7.0.9
org.springframework:spring-webflux CVE-2026-47892 CRITICAL 6.2.19 7.0.9
org.springframework:spring-webmvc CVE-2026-47884 CRITICAL 6.2.19 7.0.9
org.springframework:spring-webmvc CVE-2026-47890 CRITICAL 6.2.19 7.0.9
No Misconfigurations found