com.exasol.projectkeeper.dependencyupdate.Vulnerability Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of project-keeper-core Show documentation

Project keeper is a tool that verifies and fixes project setups.

The newest version!

package com.exasol.projectkeeper.dependencyupdate;

import java.util.List;

import jakarta.json.bind.annotation.JsonbProperty;

/**
 * Represents a vulnerability in a third party dependency.
 * 
 * @param cve         CVE number, e.g. {@code CVE-2017-10355}
 * @param cwe         CWE number, e.g. {@code CWE-833}
 * @param description Description, e.g. {@code sonatype-2017-0348 - xerces:xercesImpl - Denial of Service (DoS)}
 * @param coordinates Description, e.g. {@code xerces:xercesImpl:jar:2.12.2:test}
 * @param references  List of reference links
 * @param issueUrl    Link to the GitHub issue fixing the vulnerability, e.g.
 *                    {@code https://github.com/exasol/testing-release-robot/issues/709}
 */
public record Vulnerability(String cve, String cwe, String description, String coordinates, List references,
        @JsonbProperty("issue_url") String issueUrl) {
}