org.conductoross:java-sdk@.0.3

5.1.0

1 years ago

2 months ago

Direct Vulnerabilities

Known vulnerabilities in the org.conductoross:java-sdk package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Arbitrary Code Injection Affected versions of this package are vulnerable to Arbitrary Code Injection via the `ScriptEvaluator` process. An attacker can execute arbitrary operating system commands by injecting malicious JavaScript code. How to fix Arbitrary Code Injection? Upgrade `org.conductoross:java-sdk` to version 3.21.13 or higher.	[,3.21.13)