Vulnerability Found

[rmauc]

Hello
I am very interested in using the Ansible Sonarqube plugin (which has a dependency on this plugin).
However, our security guys ran an XRay scan and found a high vulnerability for qos.logback (attached)

.
Would you be able to take a look to determine if you can patch and release a newer version?
That would be very much appreciated if at all possible
Thanks in advance

[sbaudoin]

Hello,

Yes, I think I can change that. However I don't know how to check that my fix will be OK: do you know how I could do that?

[rmauc]

Hi
Thanks for getting back to me. I can get my guy to rerun the scan :)

[rmauc]

Hello
Do you have anything to test?
Thanks again

[sbaudoin]

Hello,

I think it's better if I can check myself the errors: going back and forth with small code change may not be efficient. So is there a way for me to check if my fix is correct?

[sbaudoin]

107935b updates the logback dependency to 1.2.3. Hope this is sufficient.

[reitzmichnicht]

You can run snyk on your project which should give you the results you expect

[sbaudoin]

Thanks. Snyk does not report issue for this project