The client is affected by the CVE's
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 45/100
Research direction
Start with the dependency tree shown in the issue and confirm the affected commons-io and okio-jvm versions against the linked CVEs. Update the dependency declarations or resolution to non-affected versions, then verify that the Java client still builds and its existing checks pass.
Written by the indexing model from the issue text.
Description
Version 1.0.0 contains dependencies that are affected
| +- com.ibm.cloud:ibm-key-protect-sdk:jar:1.0.0:compile
[INFO] | | +- com.ibm.cloud:sdk-core:jar:9.17.3:compile
...
[INFO] | | | +- commons-io:commons-io:jar:2.7:compile
..
[INFO] | | | \- com.squareup.okio:okio-jvm:jar:3.0.0:compile
commons-io:
https://nvd.nist.gov/vuln/detail/CVE-2024-47554
okio-jvm
- Dominant language
- Java
- Stars
- 1
- Forks
- 9
- PR merge metrics
- No merged PRs in 30d
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from IBM/keyprotect-java-client
-
Difficulty 1/5 Under an hour Newbie friendliness 65/100
-
security
Difficulty 4/5 3-5 days Newbie friendliness 45/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
IBM/keyprotect-java-client#29 · 4 comments ·
All issues in IBM/keyprotect-java-client
Similar issues
-
awaiting triage bug Causes friction Hop Gui P1 P2 Transforms
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
apache/flink-agents#1152 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
jenkinsci/blueocean-plugin#5417 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
objectionary/eo-graphs#75 ·