New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[GHSA-f7w2-p362-48jp] Vulnerability in the Java SE, Java SE Embedded product of... #5193

Open

dovezp wants to merge 1 commit into dovezp/advisory-improvement-5193 from dovezp-GHSA-f7w2-p362-48jp

dovezp commented Jan 17, 2025

Updates

Affected products
Severity
Summary

Comments
Missing scope of affected on advisory.


          Improve GHSA-f7w2-p362-48jp

github-actions bot changed the base branch from main to dovezp/advisory-improvement-5193

January 17, 2025 16:34

Contributor

shelbyc commented Jan 17, 2025

👋 Hi @dovezp, neither openjdk-11, openjdk-8, nor openjdk-7 appear to be valid actions in the GitHub Actions marketplace, nor can I find packages with these names in the Maven ecosystem (https://mvnrepository.com/search?q=openjdk-11, https://mvnrepository.com/search?q=openjdk-8, https://mvnrepository.com/search?q=openjdk-7). CVE-2019-2981 appears to be an issue in the Java runtime, rather than a Java package in one of GitHub's supported ecosystems. Are you able to find any Maven artifacts for openjdk-11, openjdk-8, or openjdk-7? If not, then you or I should close the pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet