ch.hortis.sonar:sonar-application (>=1.0-beta, <=1.0.2), ch.hortis.sonar:sonar-commons (>=1.0-beta, <=1.0.2) +24 more potentially affected by CVE-2024-12801 via ch.qos.logback:logback-core (0.9.8)

ch.qos.logback:logback-core MAVEN version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.hortis.sonar:sonar-application =1.0-beta, =1.0-beta, =1.0-beta, =1.0-beta, =1.0-beta, =0.9.9, =0.9.9,...

ch.hortis.sonar:sonar-application (>=1.0-beta, <=1.0.2), ch.hortis.sonar:sonar-commons (>=1.0-beta, <=1.0.2) +22 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.8)

ch.qos.logback:logback-classic MAVEN version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.hortis.sonar:sonar-application =1.0-beta, =1.0-beta, =1.0-beta, =1.0-beta, =1.0-beta, =0.9.9,...

ch.hortis.sonar:sonar-commons (0.2), ch.hortis.sonar:sonar-maven-plugin (0.2) potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.0.2)

mysql:mysql-connector-java MAVEN version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ch.hortis.sonar:sonar-commons 0.2 - ch.hortis.sonar:sonar-maven-plugin 0.2 Source cves: CVE-2019-2692 Sourc...