swedenconnect / eidas-eu-mock Goto Github PK

Hi!
Multiple vulnerabilities in your dependencies have been detected by Snyk[1]. For example:

• Access Restriction Bypass

  • Vulnerable module: org.springframework:spring-core
  • Introduced through: org.springframework:[email protected]

• Arbitrary Code Execution

  • Vulnerable module: ch.qos.logback:logback-core

  • Introduced through: ch.qos.logback:[email protected]

  • Vulnerable module: ch.qos.logback:logback-classic

  • Introduced through: ch.qos.logback:[email protected]

  • Vulnerable module: commons-fileupload:commons-fileupload

  • Introduced through: org.apache.struts:[email protected]

• Arbitrary Command Execution

  • Vulnerable module: org.apache.struts:struts2-core
  • Introduced through: org.apache.struts:[email protected]

• XML External Entity (XXE) Injection

  • Vulnerable module: javax.servlet:jstl

  • Introduced through: javax.servlet:[email protected]

  • Vulnerable module: taglibs:standard

  • Introduced through: taglibs:[email protected]

For more examples of vulnerable dependencies in this project, please see the test[1].

[1] https://snyk.io/test/github/elegnamnden/eidas-eu-mock/master%2FeIDASNodeDev-1.4.0%2FEIDAS-IdP-1.0?severity=high&severity=medium&severity=low

The module 'EIDAS-Sources-2.6.0-MDSL/EIDAS-Parent' has the following compilation error:

[ERROR] ...eidas-eu-mock/EIDAS-Sources-2.6.0-MDSL/EIDAS-JCache-Ignite-Node/src/main/java/eu/eidas/auth/cache/IgniteInstanceInitializerNode.java:[21,29] package eu.eidas.ignite.utils does not exist
[ERROR] ...eidas-eu-mock/EIDAS-Sources-2.6.0-MDSL/EIDAS-JCache-Ignite-Node/src/main/java/eu/eidas/auth/cache/IgniteInstanceInitializerNode.java:[54,17] cannot find symbol
[ERROR] symbol: variable IgniteUtils
[ERROR] location: class eu.eidas.auth.cache.IgniteInstanceInitializerNode