You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi, @jdpxiaoming , I'd like to report a vulnerability issue in io.github.jdpxiaoming:ffmpeg-cmd64:0.0.15.
Issue Description
io.github.jdpxiaoming:ffmpeg-cmd64:0.0.15 depends on 2 C libraries (.so). However, I noticed that one C library is vulnerable, containing the following CVEs:
ffmpeg has fixed the vulnerabilities in versions >=4.4.1
Java build tools cannot report vulnerable C libraries, which may induce potential security issues to many downstream Java projects.
Could you please upgrade the above shared libraries to their patch versions?
Thanks for your help~
Best regards,
Helen Parr
The text was updated successfully, but these errors were encountered:
Hi, @jdpxiaoming , I'd like to report a vulnerability issue in io.github.jdpxiaoming:ffmpeg-cmd64:0.0.15.
Issue Description
io.github.jdpxiaoming:ffmpeg-cmd64:0.0.15 depends on 2 C libraries (.so). However, I noticed that one C library is vulnerable, containing the following CVEs:
libffmpeg.so
from C project ffmpeg(version:4.0.2) exposed 2 vulnerabilities:CVE-2019-11339, CVE-2018-15822
Suggested Vulnerability Patch Versions
ffmpeg has fixed the vulnerabilities in versions >=4.4.1
Java build tools cannot report vulnerable C libraries, which may induce potential security issues to many downstream Java projects.
Could you please upgrade the above shared libraries to their patch versions?
Thanks for your help~
Best regards,
Helen Parr
The text was updated successfully, but these errors were encountered: