Trivy meldete HIGH/CRITICAL-CVEs in Dependencies. Siehe Workflow-Run und den Security-Tab (Code scanning, Kategorie `trivy-nightly`).
Activity
WolfTasks commentedon Oct 10, 2026
Fixed: #148 (source-map-js, XsltView CVE-2026-47884 trivyignored, pcre2) and #151 (CVE-2026-47890 trivyignored, log4j 2.25.5, tiff). Manual nightly run 38045433391 green; released in v1.0.20. Unfixable spring-webmvc CVEs tracked as backlog M3 (Boot 4 migration).