Legend shared dependencies udpates - #261
Merged
rafaelbey merged 1 commit intoJul 17, 2026
Merged
Mend for GitHub.com / WhiteSource Security Check
succeeded
Jul 17, 2026 in 3m 2s
Security Report
✔️ 👍 You have successfully remediated 59 vulnerabilities in this branch:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2023-0833 | okhttp-4.9.0.jar |
| CVE-2025-11143 | jetty-http-9.4.44.v20210927.jar |
| CVE-2026-54515 | jackson-databind-2.10.5.1.jar |
| CVE-2021-31684 | json-smart-2.4.2.jar |
| CVE-2025-11226 | logback-core-1.2.3.jar |
| CVE-2022-2047 | jetty-server-9.4.44.v20210927.jar |
| CVE-2026-54512 | jackson-databind-2.10.5.1.jar |
| CVE-2024-9823 | jetty-servlets-9.4.44.v20210927.jar |
| CVE-2023-26049 | jetty-server-9.4.44.v20210927.jar |
| CVE-2020-10693 | hibernate-validator-5.4.3.Final.jar |
| CVE-2023-6378 | logback-classic-1.2.3.jar |
| CVE-2026-50193 | jackson-databind-2.10.5.1.jar |
| CVE-2026-2332 | jetty-http-9.4.44.v20210927.jar |
| CVE-2025-35036 | hibernate-validator-5.4.3.Final.jar |
| CVE-2021-42550 | logback-classic-1.2.3.jar |
| CVE-2026-6790 | jetty-server-9.4.44.v20210927.jar |
| CVE-2025-49128 | jackson-core-2.10.5.jar |
| CVE-2023-36478 | jetty-http-9.4.44.v20210927.jar |
| CVE-2026-1225 | logback-core-1.2.3.jar |
| CVE-2021-42550 | logback-core-1.2.3.jar |
| WS-2022-0468 | jackson-core-2.10.5.jar |
| CVE-2025-52999 | jackson-core-2.10.5.jar |
| CVE-2023-6378 | logback-core-1.2.3.jar |
| CVE-2021-28170 | javax.el-3.0.0.jar |
| CVE-2024-12798 | logback-classic-1.2.3.jar |
| CVE-2026-9828 | logback-core-1.2.3.jar |
| CVE-2022-2047 | jetty-http-9.4.44.v20210927.jar |
| CVE-2023-40167 | jetty-http-9.4.44.v20210927.jar |
| CVE-2022-24329 | kotlin-stdlib-1.4.10.jar |
| CVE-2023-6481 | logback-core-1.2.3.jar |
| WS-2021-0616 | jackson-core-2.10.5.jar |
| CVE-2023-45859 | hazelcast-5.3.1.jar |
| CVE-2024-6763 | jetty-server-9.4.44.v20210927.jar |
| CVE-2026-54513 | jackson-databind-2.10.5.1.jar |
| CVE-2023-1370 | json-smart-2.4.2.jar |
| CVE-2020-29582 | kotlin-stdlib-1.4.10.jar |
| CVE-2022-42003 | jackson-databind-2.10.5.1.jar |
| CVE-2023-26049 | jetty-http-9.4.44.v20210927.jar |
| WS-2026-0003 | jackson-core-2.10.5.jar |
| CVE-2024-6763 | jetty-http-9.4.44.v20210927.jar |
| CVE-2024-13009 | jetty-server-9.4.44.v20210927.jar |
| CVE-2023-3635 | okio-2.8.0.jar |
| CVE-2024-12798 | logback-core-1.2.3.jar |
| WS-2023-0236 | jetty-xml-9.4.44.v20210927.jar |
| CVE-2024-8184 | jetty-server-9.4.44.v20210927.jar |
| CVE-2021-0341 | okhttp-4.9.0.jar |
| CVE-2021-46877 | jackson-databind-2.10.5.1.jar |
| CVE-2022-42004 | jackson-databind-2.10.5.1.jar |
| CVE-2022-1471 | snakeyaml-1.33.jar |
| CVE-2023-52428 | nimbus-jose-jwt-8.0.jar |
| CVE-2026-54514 | jackson-databind-2.10.5.1.jar |
| WS-2021-0616 | jackson-databind-2.10.5.1.jar |
| CVE-2026-10532 | logback-core-1.2.3.jar |
| CVE-2024-12801 | logback-core-1.2.3.jar |
| CVE-2023-26048 | jetty-server-9.4.44.v20210927.jar |
| CVE-2025-53864 | nimbus-jose-jwt-8.0.jar |
| CVE-2023-36479 | jetty-servlets-9.4.44.v20210927.jar |
| CVE-2023-45860 | hazelcast-5.3.1.jar |
| CVE-2026-40458 | pac4j-core-4.5.8.jar |
Base branch total remaining vulnerabilities: 59
Base branch commit: 2bd4a691176aad5dd4242c2d718fe15767988488
Total libraries scanned: 0
Scan token: 4f62a01aa9f14e13a6236eeec4048686
Loading