2 matches found
com.datasift.dropwizard:dropwizard-extra-scala (>=0.6.0-2 <=0.6.2-6), com.github.kongchen:swagger-maven-plugin (=1.0) +34 more potentially affected by unknown CVE via com.fasterxml.jackson.module:jackson-module-scala (>=2.0.0 <=2.1.2)
com.fasterxml.jackson.module:jackson-module-scala MAVEN version =2.0.0, =0.6.0-2, =1.1, =0.2.4, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.2.2 - com.wordnik:swagger-jersey-jaxrs2.10.0 =1.2.2 and more Source cves: unknown CVE Source advisory: SNYK:JAVA-COMFASTERXMLJACKSONMODULE-174825...
Unsafe Dependency Resolution
Overview com.fasterxml.jackson.module:jackson-module-scala is an Add-on module for Jackson http://wiki.fasterxml.com/JacksonHome to support Scala-specific datatypes. Affected versions of this package are vulnerable to Unsafe Dependency Resolution due to resolving dependencies over an insecure...