Skip to content

Vulnerability Fixes and Workload Identity Enablement

Daniel Scholl requested to merge vulnerabilities into master

New Feature: Updated OSDU Core Lib Azure supports workload identity capabilities.

Fix: Resolve vulnerabilities in pom.xml

This PR highlights the vulnerabilities that have been resolved in pom.xml. Below is the delta of vulnerabilities that were present in the previous scan but are no longer found in the current state.

Resolved Vulnerabilities:

  1. com.azure:azure-identity
    • Vulnerability: CVE-2024-35255
    • Severity: Medium
    • Issue: Azure Identity Libraries Elevation of Privilege Vulnerability
    • Resolution: Upgraded from 1.11.2 to 1.12.2.

Merge request reports