Various CVE are reported: CVE-2024-7254, sonatype-2024-0639

[yeikel]

Hi team,

I tried to pull this dependency but the following CVEs are reported that prevent me from doing so:

CVE-2024-7254
sonatype-2024-0639

Could you please fix this?

[yeikel]

It seems that the latest release fixed many of the vulnerabilities. Now only the following are pending

9	Security-High	High risk CVSS score	Found security vulnerability CVE-2024-7254 with severity >= 7 (severity = 8.7)Found security vulnerability CVE-2024-7254 with severity < 9 (severity = 8.7)
9	Security-High	High risk CVSS score	Found security vulnerability sonatype-2024-0639 with severity >= 7 (severity = 7.5)Found security vulnerability sonatype-2024-0639 with severity < 9 (severity = 7.5)