Vulnerable third-party library

[Bombita010]

Brief description of bug

Self-Diagnosis

• I have reviewed the documentation.
• I have reviewed some of the third-party library
• according to my research, you've used a vulnerable third-party library:jar:0.0.1-SNAPSHOT

Environment(for bug reports)

• Operating System:MacOS
• SciTools Understand
• Maven

Current Result (Include screenshots where appropriate.)

[INFO] -------------< br.com.leonardoz:java-concurrency-patterns >-------------
[INFO] Building Concurrency Patterns and features in Java 0.0.1-SNAPSHOT
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ java-concurrency-patterns ---
[INFO] br.com.leonardoz:java-concurrency-patterns:jar:0.0.1-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------

-------------------- Vulnerabilities Report --------------------

Found 1 vulnerabilities in target JAVA project

[1]

• CVE No: CVE-2019-15566
• CVE Level: severe
• CVE Method Name: org.alfresco.mobile.android.application.providers.search.HistorySearchProvider.createProjectionMap
• CVE Vulnerable Line: [215,220]
• File Containing This CVE in Project:
  (1)
  • File Name: alfresco-mobile-android/src/main/java/org/alfresco/mobile/android/application/providers/search/HistorySearchProvider.java
  • Line: 148
  • Column: 38

---