Skip to content

Upgrade to quarkus-pnc-client-auth 1.0.1-SNAPSHOT - #193

Merged
thescouser89 merged 1 commit into
project-ncl:masterfrom
thescouser89:pnc-client-auth-101
Aug 11, 2026
Merged

Upgrade to quarkus-pnc-client-auth 1.0.1-SNAPSHOT#193
thescouser89 merged 1 commit into
project-ncl:masterfrom
thescouser89:pnc-client-auth-101

Conversation

@thescouser89

@thescouser89 thescouser89 commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

I want to see if it's selecting the right mode for the authentication for clients and this version logs which mode we're in (OIDC/LDAP)

@thescouser89
Upgrade to quarkus-pnc-client-auth 1.0.1-SNAPSHOT
a313c75 
I want to see if it's selecting the right mode for the authentication
for clients and this version logs which mode we're in (OIDC/LDAP)
@thescouser89
thescouser89 merged commit 4bf1c3b into project-ncl:master Aug 11, 2026
2 checks passed
@github-actions

github-actions Bot commented Aug 11, 2026

Copy link
Copy Markdown

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output 



Identified 345 dependencies

Detected 69 vulnerabilities (0 Critical, 34 High, 35 Medium, 0 Low)

Displaying top 50 vulnerabilities. View the full list on the application.
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |                 LIBRARY                  |       ID       |                                               TOP FIX                                                |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.18.2.jar                  | CVE-2026-68494 | Upgrade to version tools.jackson.core:jackson-core:3.1.4,                                            |
|          |                                          |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.4,                                 |
|          |                                          |                | com.fasterxml.jackson.core:jackson-core:2.18.8, https://github.com/FasterXML/jackson-core.git -      |
|          |                                          |                | jackson-core-2.18.8,com.fasterxml.jackson.core:jackson-core:2.21.4                                   |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.18.2.jar                  | WS-2026-0003   | Upgrade to version com.fasterxml.jackson.core:jackson-core:2.18.6,                                   |
|          |                                          |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.1,                                 |
|          |                                          |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.6,                                 |
|          |                                          |                | tools.jackson.core:jackson-core:3.1.0, https://github.com/FasterXML/jackson-core.git -               |
|          |                                          |                | jackson-core-3.1.0                                                                                   |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.18.2.jar              | CVE-2026-54512 | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.8      |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.18.2.jar              | CVE-2026-54513 | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.4       |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | micrometer-core-1.14.6.jar               | CVE-2026-40984 | Upgrade to version io.micrometer:micrometer-core:1.15.12,io.micrometer:micrometer-core:1.16.6,       |
|          |                                          |                | io.micrometer:micrometer-jetty12:1.16.6, https://github.com/micrometer-metrics/micrometer.git -      |
|          |                                          |                | v1.15.12, https://github.com/micrometer-metrics/micrometer.git - v1.16.6,                            |
|          |                                          |                | io.micrometer:micrometer-jetty12:1.15.12,io.micrometer:micrometer-jetty11:1.16.6,                    |
|          |                                          |                | io.micrometer:micrometer-jetty11:1.15.12                                                             |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-4.1.119.Final.jar            | CVE-2026-42583 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.133.Final,                        |
|          |                                          |                | io.netty:netty-codec:4.1.133.Final,io.netty:netty-codec-compression:4.2.13.Final,                    |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.2.13.Final                                              |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-4.1.119.Final.jar            | CVE-2026-59901 | io.netty:netty-codec:4.1.136.Final,io.netty:netty-codec-compression:4.2.16.Final                     |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-dns-4.1.119.Final.jar        | CVE-2026-42579 | Upgrade to version io.netty:netty-codec-dns:4.1.133.Final, https://github.com/netty/netty.git -      |
|          |                                          |                | netty-4.2.13.Final,io.netty:netty-codec-dns:4.2.13.Final, https://github.com/netty/netty.git -       |
|          |                                          |                | netty-4.1.133.Final                                                                                  |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-haproxy-4.1.119.Final.jar    | CVE-2026-44893 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.135.Final,                        |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.2.15.Final                                              |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-haproxy-4.1.119.Final.jar    | CVE-2026-48059 | Upgrade to version  https://github.com/netty/netty.git - 4.1.135.Final                               |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-haproxy-4.1.119.Final.jar    | CVE-2026-55851 | Upgrade to version io.netty:netty-codec-haproxy:4.2.16.Final,                                        |
|          |                                          |                | io.netty:netty-codec-haproxy:4.1.136.Final, https://github.com/netty/netty.git - netty-4.2.16.Final, |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.1.136.Final                                             |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.119.Final.jar       | CVE-2026-33870 | io.netty:netty-codec-http:4.1.132.Final,io.netty:netty-codec-http:4.2.10.Final                       |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.119.Final.jar       | CVE-2026-42584 | Upgrade to version io.netty:netty-codec-http:4.1.133.Final, https://github.com/netty/netty.git -     |
|          |                                          |                | netty-4.2.13.Final,io.netty:netty-codec-http:4.2.13.Final, https://github.com/netty/netty.git -      |
|          |                                          |                | netty-4.1.133.Final                                                                                  |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.119.Final.jar       | CVE-2026-42587 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.13.Final,                         |
|          |                                          |                | io.netty:netty-codec-http:4.2.13.Final, https://github.com/netty/netty.git - netty-4.1.133.Final,    |
|          |                                          |                | io.netty:netty-codec-http2:4.1.133.Final,io.netty:netty-codec-http2:4.2.13.Final,                    |
|          |                                          |                | io.netty:netty-codec-http:4.1.133.Final                                                              |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.119.Final.jar       | CVE-2026-55831 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final    |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.119.Final.jar       | CVE-2026-55833 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final    |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.119.Final.jar       | CVE-2026-56745 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final,   |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git -       |
|          |                                          |                | netty-4.2.16.Final                                                                                   |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.119.Final.jar      | CVE-2025-55163 | Upgrade to version  https://github.com/netty/netty.git - 4.2.4.Final,                                |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.1.124.Final,io.netty:netty-codec-http2:4.1.124.Final,   |
|          |                                          |                | io.netty:netty-codec-http2:4.2.4.Final                                                               |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.119.Final.jar      | CVE-2026-33871 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.132.Final,                        |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.2.11.Final                                              |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.119.Final.jar      | CVE-2026-42587 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.13.Final,                         |
|          |                                          |                | io.netty:netty-codec-http:4.2.13.Final, https://github.com/netty/netty.git - netty-4.1.133.Final,    |
|          |                                          |                | io.netty:netty-codec-http2:4.1.133.Final,io.netty:netty-codec-http2:4.2.13.Final,                    |
|          |                                          |                | io.netty:netty-codec-http:4.1.133.Final                                                              |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.119.Final.jar      | CVE-2026-56819 | Upgrade to version io.netty:netty-codec-http2:4.1.136.Final,io.netty:netty-codec-http2:4.2.16.Final, |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git -       |
|          |                                          |                | netty-4.2.16.Final                                                                                   |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.119.Final.jar      | CVE-2026-59900 | Upgrade to version io.netty:netty-codec-http2:4.1.136.Final                                          |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.119.Final.jar          | CVE-2026-44249 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.15.Final,                         |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.1.135.Final                                             |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.119.Final.jar          | CVE-2026-45416 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.15.Final,                         |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.1.135.Final                                             |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.119.Final.jar          | CVE-2026-50010 | Upgrade to version  https://github.com/netty/netty.git - 4.1.135.Final                               |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-resolver-dns-4.1.119.Final.jar     | CVE-2026-45674 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.15.Final,                         |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.1.135.Final                                             |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-resolver-dns-4.1.119.Final.jar     | CVE-2026-47691 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.15.Final,                         |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.1.135.Final                                             |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | parsson-1.1.7.jar                        | CVE-2026-9563  | Upgrade to version org.eclipse.parsson:parsson:1.1.8, https://github.com/eclipse-ee4j/parsson.git -  |
|          |                                          |                | 1.1.8                                                                                                |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | quarkus-openapi-generator-2.15.0-lts.jar | CVE-2026-40180 | Upgrade to version io.quarkiverse.openapi.generator:quarkus-openapi-generator:2.16.0,                |
|          |                                          |                | https://github.com/quarkiverse/quarkus-openapi-generator.git - 2.16.0                                |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | quarkus-vertx-http-3.21.4.jar            | CVE-2026-39852 | Upgrade to version io.quarkus:quarkus-vertx-http:3.33.1.1,io.quarkus:quarkus-vertx-http:3.20.6.1,    |
|          |                                          |                | io.quarkus:quarkus-vertx-http:3.27.3.1,io.quarkus:quarkus-vertx-http:3.35.1.1,                       |
|          |                                          |                | io.quarkus:quarkus-vertx-http:3.34.7                                                                 |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | quarkus-vertx-http-3.21.4.jar            | CVE-2026-50559 | Upgrade to version io.quarkus:quarkus-vertx-http:3.27.4.1,io.quarkus:quarkus-vertx-http:3.33.2.1,    |
|          |                                          |                | io.quarkus:quarkus-vertx-http:3.36.3,io.quarkus:quarkus-vertx-http:3.20.6.2,                         |
|          |                                          |                | https://github.com/quarkusio/quarkus.git - 3.20.6.2, https://github.com/quarkusio/quarkus.git -      |
|          |                                          |                | 3.36.3, https://github.com/quarkusio/quarkus.git - 3.27.4.1,                                         |
|          |                                          |                | https://github.com/quarkusio/quarkus.git - 3.33.2.1                                                  |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | sshd-common-2.12.1.jar                   | CVE-2026-56624 | Upgrade to version  https://github.com/apache/mina-sshd.git - sshd-3.0.0-M5,                         |
|          |                                          |                | org.apache.sshd:sshd-core:2.19.0,org.apache.sshd:sshd-common:3.0.0-M5,                               |
|          |                                          |                | org.apache.sshd:sshd-core:3.0.0-M5, https://github.com/apache/mina-sshd.git - sshd-2.19.0,           |
|          |                                          |                | org.apache.sshd:sshd-common:2.19.0                                                                   |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | vertx-core-4.5.14.jar                    | CVE-2026-15075 | Upgrade to version  https://github.com/eclipse-vertx/vert.x.git - 5.1.5,io.vertx:vertx-core:4.5.30,  |
|          |                                          |                | io.vertx:vertx-core:5.1.5, https://github.com/eclipse-vertx/vert.x.git - 4.5.30                      |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | vertx-web-client-4.5.14.jar              | CVE-2026-15076 | Upgrade to version io.vertx:vertx-web-client:4.5.30, https://github.com/vert-x3/vertx-web.git -      |
|          |                                          |                | 4.5.30, https://github.com/vert-x3/vertx-web.git - 5.1.5,io.vertx:vertx-web-client:5.1.5             |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | angus-mail-2.0.3.jar                     | CVE-2025-7962  | Upgrade to version org.eclipse.angus:angus-mail:2.0.4,org.eclipse.angus:jakarta.mail:2.0.4,          |
|          |                                          |                | org.eclipse.angus:smtp:2.0.4, https://github.com/eclipse-ee4j/angus-mail.git - 2.0.4,                |
|          |                                          |                | com.sun.mail:jakarta.mail:1.6.8,com.sun.mail:jakarta.mail:2.0.2                                      |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-core-2.18.2.jar                  | CVE-2026-18401 | Upgrade to version com.fasterxml.jackson.core:jackson-core:2.21.1,                                   |
|          |                                          |                | tools.jackson.core:jackson-core:3.1.0, https://github.com/FasterXML/jackson-core.git -               |
|          |                                          |                | jackson-core-2.18.6,com.fasterxml.jackson.core:jackson-core:2.18.6,                                  |
|          |                                          |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.1                                  |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.18.2.jar              | CVE-2026-54514 | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.8      |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.18.2.jar              | CVE-2026-54515 | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.4,      |
|          |                                          |                | com.fasterxml.jackson.core:jackson-databind:2.21.5,                                                  |
|          |                                          |                | com.fasterxml.jackson.core:jackson-databind:2.22.1,                                                  |
|          |                                          |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.9,                         |
|          |                                          |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.5,                         |
|          |                                          |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.1                          |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.18.2.jar              | CVE-2026-59888 | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.18.8,                               |
|          |                                          |                | com.fasterxml.jackson.core:jackson-databind:2.21.4,tools.jackson.core:jackson-databind:3.1.4         |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.18.2.jar              | CVE-2026-59889 | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.21.5,                               |
|          |                                          |                | tools.jackson.core:jackson-databind:3.1.5,tools.jackson.core:jackson-databind:3.2.1,                 |
|          |                                          |                | com.fasterxml.jackson.core:jackson-databind:2.22.1                                                   |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-4.1.119.Final.jar            | CVE-2025-58057 | Upgrade to version io.netty:netty-all:4.1.125.Final,io.netty:netty-codec-http:4.1.125.Final,         |
|          |                                          |                | io.netty:netty-codec-http2:4.2.5.Final,io.netty:netty-codec-http:4.2.5.Final,                        |
|          |                                          |                | io.netty:netty-codec-compression:4.2.5.Final, https://github.com/netty/netty.git -                   |
|          |                                          |                | netty-4.1.125.Final,io.netty:netty-all:4.2.5.Final,io.netty:netty-codec-http2:4.1.125.Final,         |
|          |                                          |                | io.netty:netty-codec:4.1.125.Final, https://github.com/netty/netty.git - netty-4.2.5.Final           |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-haproxy-4.1.119.Final.jar    | CVE-2026-59919 | io.netty:netty-codec-haproxy:4.1.136.Final,io.netty:netty-codec-haproxy:4.2.16.Final                 |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.119.Final.jar       | CVE-2025-58056 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.5.Final,                          |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.1.125.Final,io.netty:netty-codec-http:4.2.5.Final,      |
|          |                                          |                | io.netty:netty-codec-http:4.1.125.Final                                                              |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.119.Final.jar       | CVE-2025-58057 | Upgrade to version io.netty:netty-all:4.1.125.Final,io.netty:netty-codec-http:4.1.125.Final,         |
|          |                                          |                | io.netty:netty-codec-http2:4.2.5.Final,io.netty:netty-codec-http:4.2.5.Final,                        |
|          |                                          |                | io.netty:netty-codec-compression:4.2.5.Final, https://github.com/netty/netty.git -                   |
|          |                                          |                | netty-4.1.125.Final,io.netty:netty-all:4.2.5.Final,io.netty:netty-codec-http2:4.1.125.Final,         |
|          |                                          |                | io.netty:netty-codec:4.1.125.Final, https://github.com/netty/netty.git - netty-4.2.5.Final           |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.119.Final.jar       | CVE-2025-67735 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.8.Final,                          |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.1.129.Final                                             |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.119.Final.jar       | CVE-2026-41417 | Upgrade to version io.netty:netty-codec-http:4.1.133.Final,io.netty:netty-codec-http:4.2.13.Final    |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.119.Final.jar       | CVE-2026-42580 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.133.Final,                        |
|          |                                          |                | https://github.com/netty/netty.git - netty-4.2.13.Final,io.netty:netty-codec-http:4.1.133.Final,     |
|          |                                          |                | io.netty:netty-codec-http:4.2.13.Final                                                               |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.119.Final.jar       | CVE-2026-42581 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.13.Final,                         |
|          |                                          |                | io.netty:netty-codec-http:4.1.133.Final, https://github.com/netty/netty.git - netty-4.1.133.Final,   |
|          |                                          |                | io.netty:netty-codec-http:4.2.13.Final                                                               |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.119.Final.jar       | CVE-2026-42585 | Upgrade to version io.netty:netty-codec-http:4.2.13.Final,io.netty:netty-codec-http:4.1.133.Final    |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.119.Final.jar       | CVE-2026-50020 | Upgrade to version  https://github.com/netty/netty.git - 4.1.135.Final                               |
+----------+------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

rest-client-1.2.4-SNAPSHOT.jar
|-- quarkus-openapi-generator-oidc-2.15.0-lts.jar
	|-- quarkus-openapi-generator-2.15.0-lts.jar [1 HIGH, 1 MEDIUM]
|-- quarkus-openapi-generator-2.15.0-lts.jar [1 HIGH, 1 MEDIUM]
	|-- quarkus-oidc-common-3.21.4.jar
		|-- quarkus-smallrye-jwt-build-3.21.4.jar
			|-- smallrye-jwt-build-4.6.1.jar
				|-- parsson-1.1.7.jar [1 HIGH]
		|-- quarkus-vertx-3.21.4.jar [1 MEDIUM]
			|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
			|-- netty-codec-haproxy-4.1.119.Final.jar [3 HIGH, 1 MEDIUM]
				|-- netty-codec-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
			|-- quarkus-netty-3.21.4.jar
				|-- netty-codec-http2-4.1.119.Final.jar [5 HIGH, 4 MEDIUM]
				|-- netty-codec-http-4.1.119.Final.jar [6 HIGH, 12 MEDIUM]
				|-- netty-codec-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
				|-- netty-handler-4.1.119.Final.jar [3 HIGH]
					|-- netty-codec-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
			|-- quarkus-virtual-threads-3.21.4.jar
				|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
			|-- smallrye-common-vertx-context-2.12.0.jar
				|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
			|-- smallrye-fault-tolerance-vertx-6.9.1.jar
				|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
		|-- smallrye-mutiny-vertx-web-client-3.18.1.jar
			|-- jackson-core-2.18.2.jar [2 HIGH, 1 MEDIUM]
			|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
			|-- smallrye-mutiny-vertx-auth-common-3.18.1.jar
				|-- vertx-auth-common-4.5.14.jar
					|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
			|-- smallrye-mutiny-vertx-core-3.18.1.jar
				|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
				|-- smallrye-mutiny-vertx-runtime-3.18.1.jar
					|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
				|-- vertx-mutiny-generator-3.18.1.jar
					|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
				|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
			|-- smallrye-mutiny-vertx-web-common-3.18.1.jar
				|-- vertx-web-common-4.5.14.jar
					|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
			|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
			|-- vertx-web-client-4.5.14.jar [1 HIGH]
				|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
				|-- vertx-codegen-4.5.14.jar
					|-- jackson-core-2.18.2.jar [2 HIGH, 1 MEDIUM]
				|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
				|-- vertx-uri-template-4.5.14.jar
					|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
	|-- quarkus-qute-3.21.4.jar
		|-- quarkus-vertx-3.21.4.jar [1 MEDIUM]
|-- quarkus-config-yaml-3.21.4.jar
	|-- quarkus-core-3.21.4.jar
		|-- jboss-logmanager-3.1.2.Final.jar
			|-- parsson-1.1.7.jar [1 HIGH]
|-- quarkus-rest-client-jackson-3.21.4.jar
	|-- resteasy-reactive-jackson-3.21.4.jar
		|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
	|-- quarkus-rest-client-3.21.4.jar
		|-- quarkus-rest-client-jaxrs-3.21.4.jar
			|-- resteasy-reactive-client-3.21.4.jar
				|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
				|-- vertx-web-client-4.5.14.jar [1 HIGH]
			|-- quarkus-vertx-3.21.4.jar [1 MEDIUM]
		|-- quarkus-smallrye-stork-3.21.4.jar
			|-- quarkus-vertx-3.21.4.jar [1 MEDIUM]
		|-- quarkus-tls-registry-3.21.4.jar
			|-- quarkus-tls-registry-spi-3.21.4.jar
				|-- quarkus-vertx-3.21.4.jar [1 MEDIUM]
			|-- smallrye-private-key-pem-parser-0.9.2.jar
				|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
		|-- stork-core-2.7.3.jar
			|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
	|-- quarkus-rest-jackson-common-3.21.4.jar
		|-- quarkus-jackson-3.21.4.jar
			|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
			|-- jackson-datatype-jdk8-2.18.2.jar
				|-- jackson-core-2.18.2.jar [2 HIGH, 1 MEDIUM]
				|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
			|-- jackson-datatype-jsr310-2.18.2.jar
				|-- jackson-core-2.18.2.jar [2 HIGH, 1 MEDIUM]
				|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
			|-- jackson-module-parameter-names-2.18.2.jar
				|-- jackson-core-2.18.2.jar [2 HIGH, 1 MEDIUM]
				|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
			|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
				|-- jackson-core-2.18.2.jar [2 HIGH, 1 MEDIUM]
				|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
				|-- netty-codec-haproxy-4.1.119.Final.jar [3 HIGH, 1 MEDIUM]
				|-- netty-codec-http2-4.1.119.Final.jar [5 HIGH, 4 MEDIUM]
					|-- netty-codec-http-4.1.119.Final.jar [6 HIGH, 12 MEDIUM]
					|-- netty-codec-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
					|-- netty-handler-4.1.119.Final.jar [3 HIGH]
				|-- netty-codec-http-4.1.119.Final.jar [6 HIGH, 12 MEDIUM]
					|-- netty-codec-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
					|-- netty-handler-4.1.119.Final.jar [3 HIGH]
				|-- netty-handler-proxy-4.1.119.Final.jar [1 MEDIUM]
					|-- netty-codec-http-4.1.119.Final.jar [6 HIGH, 12 MEDIUM]
					|-- netty-codec-socks-4.1.119.Final.jar
						|-- netty-codec-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
					|-- netty-codec-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
					|-- netty-handler-4.1.119.Final.jar [3 HIGH]
				|-- netty-handler-4.1.119.Final.jar [3 HIGH]
				|-- netty-resolver-dns-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
					|-- netty-codec-dns-4.1.119.Final.jar [1 HIGH]
						|-- netty-codec-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
					|-- netty-codec-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
					|-- netty-handler-4.1.119.Final.jar [3 HIGH]
		|-- quarkus-jsonp-3.21.4.jar
			|-- parsson-1.1.7.jar [1 HIGH]
		|-- quarkus-rest-common-3.21.4.jar
			|-- resteasy-reactive-common-3.21.4.jar
				|-- parsson-1.1.7.jar [1 HIGH]
			|-- quarkus-vertx-3.21.4.jar [1 MEDIUM]
|-- quarkus-resteasy-client-oidc-filter-3.21.4.jar
	|-- quarkus-oidc-client-3.21.4.jar
		|-- quarkus-vertx-3.21.4.jar [1 MEDIUM]
	|-- quarkus-resteasy-client-3.21.4.jar
		|-- quarkus-resteasy-common-3.21.4.jar
			|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
		|-- resteasy-multipart-provider-6.2.12.Final.jar
			|-- angus-mail-2.0.3.jar [1 MEDIUM]
			|-- parsson-1.1.7.jar [1 HIGH]
|-- pnc-api-3.0.5-jakarta.jar
	|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
		|-- jackson-core-2.18.2.jar [2 HIGH, 1 MEDIUM]
rex-api-1.2.4-SNAPSHOT.jar
|-- quarkus-smallrye-openapi-3.21.4.jar
	|-- quarkus-core-3.21.4.jar
		|-- jboss-logmanager-3.1.2.Final.jar
			|-- parsson-1.1.7.jar [1 HIGH]
	|-- quarkus-swagger-ui-3.21.4.jar
		|-- quarkus-vertx-http-3.21.4.jar [2 HIGH, 1 MEDIUM]
	|-- quarkus-vertx-http-3.21.4.jar [2 HIGH, 1 MEDIUM]
		|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
		|-- quarkus-tls-registry-3.21.4.jar
			|-- quarkus-tls-registry-spi-3.21.4.jar
				|-- quarkus-vertx-3.21.4.jar [1 MEDIUM]
			|-- smallrye-private-key-pem-parser-0.9.2.jar
				|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
			|-- vertx-web-4.5.14.jar [2 MEDIUM]
		|-- quarkus-vertx-3.21.4.jar [1 MEDIUM]
			|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
			|-- netty-codec-haproxy-4.1.119.Final.jar [3 HIGH, 1 MEDIUM]
				|-- netty-codec-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
			|-- quarkus-netty-3.21.4.jar
				|-- netty-codec-http2-4.1.119.Final.jar [5 HIGH, 4 MEDIUM]
					|-- netty-codec-http-4.1.119.Final.jar [6 HIGH, 12 MEDIUM]
					|-- netty-codec-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
					|-- netty-handler-4.1.119.Final.jar [3 HIGH]
				|-- netty-codec-http-4.1.119.Final.jar [6 HIGH, 12 MEDIUM]
				|-- netty-codec-4.1.119.Final.jar [2 HIGH, 1 MEDIUM]
				|-- netty-handler-4.1.119.Final.jar [3 HIGH]
			|-- quarkus-virtual-threads-3.21.4.jar
				|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
			|-- smallrye-fault-tolerance-vertx-6.9.1.jar
				|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
		|-- smallrye-common-vertx-context-2.12.0.jar
			|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
		|-- smallrye-mutiny-vertx-web-3.18.1.jar
			|-- smallrye-mutiny-vertx-core-3.18.1.jar
				|-- jackson-databind-2.18.2.jar [2 HIGH, 4 MEDIUM]
				|-- smallrye-mutiny-vertx-runtime-3.18.1.jar
					|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
				|-- vertx-mutiny-generator-3.18.1.jar
					|-- vertx-core-4.5.14.jar [1 HIGH, 2 MEDIUM]
... *truncated, see full logs below*
SAST scan output 
*no findings*

Full logs and artifacts

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@thescouser89