[
https://issues.apache.org/jira/browse/ZOOKEEPER-4662?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17679782#comment-17679782
]
Enrico Olivelli commented on ZOOKEEPER-4662:
--------------------------------------------
it seems that it is a false positive
[https://nvd.nist.gov/vuln/detail/CVE-2022-31514]
> OWASP is failing on the zookeeper-it module due to JUnit CVEs
> -------------------------------------------------------------
>
> Key: ZOOKEEPER-4662
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4662
> Project: ZooKeeper
> Issue Type: Test
> Components: tests
> Affects Versions: 3.8.0
> Reporter: Enrico Olivelli
> Priority: Major
> Fix For: 3.9.0, 3.8.1, 3.7.2
>
>
>
> {code:java}
> [ERROR] One or more dependencies were identified with vulnerabilities that
> have a CVSS score greater than or equal to '0.0':
> [ERROR]
> [ERROR] junit-4.13.jar: CVE-2020-15250(5.5)
> [ERROR] junit-platform-engine-1.6.2.jar: CVE-2022-31514(9.3)
> [ERROR]
> [ERROR] See the dependency-check report for more details.
> {code}
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
