René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"json-patch-1.13.jar: CVE-2021-4279(9.8)","articleBody":"The dependency check is now failing on `json-patch`:\r\n\r\n```\r\n[ERROR] Failed to execute goal org.owasp:dependency-check-maven:7.4.3:check (default-cli) on project ins-app: \r\n[ERROR] \r\n[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '8.0': \r\n[ERROR] \r\n[ERROR] json-patch-1.13.jar: CVE-2021-4279(9.8)\r\n```\r\n\r\nCVE is https://nvd.nist.gov/vuln/detail/CVE-2021-4279 \r\n\r\nThe fix PR is probably here (https://github.com/Starcounter-Jack/JSON-Patch/commit/7ad6af41eabb2d799f698740a91284d762c955c9). But it is another repository?\r\n\r\nAlthough this library version is pretty old, I found this CVE as a dependency of `io.swagger.parser.v3:swagger-parser:jar:2.1.7`, see https://github.com/swagger-api/swagger-parser/issues/1867.","author":{"url":"https://github.com/dmitry-weirdo","@type":"Person","name":"dmitry-weirdo"},"datePublished":"2023-01-05T11:05:46.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/144/json-patch/issues/144"}