com.jakehschwartz:finatra-swagger_2.12 (18.8.0), com.whisk:finatra-swagger_2.12 (18.9.1-whisk) +3 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.14.2)

org.webjars:swagger-ui MAVEN version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.jakehschwartz:finatra-swagger2.12 18.8.0 - com.whisk:finatra-swagger2.12 18.9.1-whisk - io.virtualan:idaiserve...

org.apache.syncope.fit:syncope-fit-build-tools (>=2.0.9, <=2.1.0), org.jooby:jooby-apitool (>=1.5.0, <=1.6.9) +1 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.17.1)

org.webjars:swagger-ui MAVEN version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - org.apache.syncope.fit:syncope-fit-build-tools =2.0.9, =1.5.0, =1.5.0, =1.6.9 Source cves: CVE-2018-25031 Source...

org.jooby:jooby-apitool (>=1.2.0, <=1.2.3), org.jooby:jooby-maven-plugin (>=1.2.0, <=1.2.3) +1 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.1.6)

org.webjars:swagger-ui MAVEN version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - org.jooby:jooby-apitool =1.2.0, =1.2.0, =1.2.0, =1.2.3 Source cves: CVE-2018-25031 Source advisory:...

org.jooby:jooby-hbm (0.1.0), org.jooby:jooby-hbs (0.1.0) +3 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.1.0)

org.jooby:jooby MAVEN version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-hbm 0.1.0 - org.jooby:jooby-hbs 0.1.0 - org.jooby:jooby-jackson 0.1.0 - org.jooby:jooby-jdbc 0.1.0 -...

org.jooby:coverage-report (0.11.0), org.jooby:jooby-akka (0.11.0) +43 more potentially affected by CVE-2019-15477 via org.jooby:jooby (0.11.0)

org.jooby:jooby MAVEN version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 0.11.0 - org.jooby:jooby-akka 0.11.0 - org.jooby:jooby-assets 0.11.0 - org.jooby:jooby-assets-clean-cs...