René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"commons-dbcp-1.4.jar: 1 vulnerabilities (highest severity is: 9.8) [master]","articleBody":"\u003cdetails\u003e\n  \u003csummary\u003e📂 Vulnerable Library - \u003cstrong\u003ecommons-dbcp-1.4.jar\u003c/strong\u003e\u003c/summary\u003e\n\nCommons Database Connection Pooling\n\n\n\n**Path to dependency file:** /pom.xml\n\n**Path to vulnerable library:** /home/wss-scanner/.m2/repository/commons-dbcp/commons-dbcp/1.4/commons-dbcp-1.4.jar\n\n\n\u003c/details\u003e\n\n\n# Findings\n| Finding | Severity | 🎯 CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available | **Reachability** |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- | --- |\n| [ CVE-853521-722872 ](https://www.mend.io/vulnerability-database/CVE-853521-722872) | 🟣 Critical | 9.8 | N/A | N/A | commons-pool-1.5.4.jar | Transitive | N/A | ❌ | |\n\n\n# Details\n\n\n\u003cdetails\u003e\n  \u003csummary\u003e\n 🟣CVE-853521-722872\n  \u003c/summary\u003e\n\n### Vulnerable Library - **commons-pool-1.5.4.jar**\n\nCommons Object Pooling Library\n\n**Library home page:** [ http://www.apache.org/ ](http://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n**Path to vulnerable library:** /home/wss-scanner/.m2/repository/commons-pool/commons-pool/1.5.4/commons-pool-1.5.4.jar\n\n\n\n**Dependency Hierarchy:**\n\n\n- commons-dbcp-1.4.jar (Root Library)\n    - ❌  **commons-pool-1.5.4.jar** (Vulnerable Library)\n\n\n\n\n***\n\n### Vulnerability Details\n\nCreated automatically by the test suite\n\n**Publish Date:** Jun 07, 2010 05:12 PM\n\n**URL:** [ CVE-853521-722872 ](https://www.mend.io/vulnerability-database/CVE-853521-722872)\n\n**Threat Assessment**\n\nExploit Maturity:N/A\n\nEPSS:N/A\n\n**Score:** 9.8\n\n\n***\n### Suggested Fix\n\n**Type:** Upgrade version\n\n**Origin:** \n\n**Release Date:** \n\n**Fix Resolution :** \n\n\n\u003c/details\u003e\n\n[comment]: \u003c\u003e (\u003cMEND_ISSUE_METADATA\u003e{\"identifier\":\"commons-dbcp-1.4.jar\",\"repoName\":\"BenchmarkJava\",\"branchName\":\"master\",\"type\":\"SCA_DEP\"}\u003c/MEND_ISSUE_METADATA\u003e)","author":{"url":"https://github.com/mend-developer-platform-dev[bot]","@type":"Person","name":"mend-developer-platform-dev[bot]"},"datePublished":"2025-09-28T05:43:44.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/42/BenchmarkJava/issues/42"}