codel1417 / neptune-discord-bot Goto Github PK

Vulnerabilities

DepShield reports that this application's usage of com.lowagie:itext:2.1.7 results in the following vulnerability(s):

• (CVSS 7.8) [CVE-2017-9096] Improper Restriction of XML External Entity Reference ("XXE")

Occurrences

com.lowagie:itext:2.1.7 is a transitive dependency introduced by the following direct dependency(s):

• net.sourceforge.tess4j:tess4j:4.5.4
        └─ org.ghost4j:ghost4j:1.0.1
              └─ com.lowagie:itext:2.1.7

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Images with a capital file extension are not detected by the jda method.

Vulnerabilities

DepShield reports that this application's usage of org.apache.httpcomponents:httpclient:4.5.10 results in the following vulnerability(s):

• (CVSS 5.3) [CVE-2020-13956] Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret ma...

Occurrences

org.apache.httpcomponents:httpclient:4.5.10 is a transitive dependency introduced by the following direct dependency(s):

• com.sedmelluq:lavaplayer:1.3.73
        └─ org.apache.httpcomponents:httpclient:4.5.10

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

gradle leaves multiple unused assets taking up a notable amount of storage space

Vulnerabilities

DepShield reports that this application's usage of log4j:log4j:1.2.17 results in the following vulnerability(s):

• (CVSS 9.8) [CVE-2019-17571] Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserializat...
• (CVSS 3.7) [CVE-2020-9488] Improper validation of certificate with host mismatch in Apache Log4j SMTP appen...

Occurrences

log4j:log4j:1.2.17 is a transitive dependency introduced by the following direct dependency(s):

• net.sourceforge.tess4j:tess4j:4.5.4
        └─ org.ghost4j:ghost4j:1.0.1
              └─ log4j:log4j:1.2.17

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Sentry Issue: NEPTUNE-8F

NullPointerException: None
    at neptune.serverLogging.GuildLogging.GuildText(GuildLogging.java:175)
    at neptune.serverLogging.GuildLogging.GuildText(GuildLogging.java:132)
    at neptune.commands.PassiveCommands.LoggingListener.onEvent(LoggingListener.java:45)
    at neptune.commands.ListenerHandler.onEvent(ListenerHandler.java:51)
    at net.dv8tion.jda.api.hooks.InterfacedEventManager.handle(InterfacedEventManager.java:96)
...
(16 additional frame(s) were not displayed)

Vulnerabilities

DepShield reports that this application's usage of commons-collections:commons-collections:3.2.1 results in the following vulnerability(s):

• (CVSS 9.8) [CVE-2017-15708] In Apache Synapse, by default no authentication is required for Java Remote Meth...
• (CVSS 7.5) [CVE-2015-6420] Serialized-object interfaces in certain Cisco Collaboration and Social Media; En...

Occurrences

commons-collections:commons-collections:3.2.1 is a transitive dependency introduced by the following direct dependency(s):

• net.sourceforge.tess4j:tess4j:4.5.4
        └─ org.ghost4j:ghost4j:1.0.1
              └─ commons-beanutils:commons-beanutils:1.9.2
                    └─ commons-collections:commons-collections:3.2.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of commons-beanutils:commons-beanutils:1.9.2 results in the following vulnerability(s):

• (CVSS 7.3) [CVE-2019-10086] In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added wh...

Occurrences

commons-beanutils:commons-beanutils:1.9.2 is a transitive dependency introduced by the following direct dependency(s):

• net.sourceforge.tess4j:tess4j:4.5.4
        └─ org.ghost4j:ghost4j:1.0.1
              └─ commons-beanutils:commons-beanutils:1.9.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}