Vulnerabilities found in com.google.cloud.tools.jib

Help/Discuss scans.gradle.com
1

  • org.yaml:snakeyaml vulnerability found on v1.33. Fixed in v2.0

  • com.google.guava:guava vulnerability found on v31.1-jre. Fixed in v32.0

Can these be updated ?

2

Hi,

Can you elaborate more on where you are seeing this and why this post is in the scans.gradle.com forum?

Thanks and regards,

Guy

3

Ask the Jib developers?

4

Or just update those transitive dependencies for you using dependency constraints and test whether everything still works or whether there were breaking changes that make it not work.

1 Like