You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Path to dependency file: /opentelemetry-java/contrib/auto_annotations/build.gradle
Path to vulnerable library: /.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar
mend-bolt-for-githubbot
changed the title
CVE-2019-9658 (Medium) detected in checkstyle-8.12.jar
CVE-2019-9658 (Medium) detected in checkstyle-8.12.jar - autoclosed
Apr 28, 2022
✔️ This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.
CVE-2019-9658 - Medium Severity Vulnerability
Vulnerable Library - checkstyle-8.12.jar
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard
Library home page: http://checkstyle.sourceforge.net/
Path to dependency file: /opentelemetry-java/contrib/auto_annotations/build.gradle
Path to vulnerable library: /.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar,/.gradle/caches/modules-2/files-2.1/com.puppycrawl.tools/checkstyle/8.12/10a0937868b45a8d6bce041ae432054a5df2ded8/checkstyle-8.12.jar
Dependency Hierarchy:
Found in HEAD commit: 64dde89c50c07496423c4d4a865f2e16b92399ad
Vulnerability Details
Checkstyle before 8.18 loads external DTDs by default.
Publish Date: 2019-03-11
URL: CVE-2019-9658
CVSS 3 Score Details (5.3)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: checkstyle/checkstyle#6474
Release Date: 2020-10-01
Fix Resolution: checkstyle-8.18
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: