Hello! There exists vulnerable dependency in your project. Are you aware of it?

[ghost]

Hello! I find a vulnerable dependency in your project, and I find its vulnerable method can be easily accessed from your project. Therefore, maybe you need to upgrade this dependency.

• CVE_ID: CVE-2022-33980
• Vulnerable dependency: org.apache.commons:commons-configuration2
• Your invocation path to the vulnerable method:

com.privalia.qa.lookups.EnvPropertyLookup:lookup(java.lang.String)
⬇️
org.apache.commons.configuration2.CombinedConfiguration:<init>(org.apache.commons.configuration2.tree.NodeCombiner)
⬇️
...
⬇️
org.apache.commons.configuration2.interpol.ConfigurationInterpolator:getDefaultPrefixLookups()

Hope this can help you! 😄