| Key | Value |
|---|---|
| Timestamp | 2023-09-06T08:55:46-04:00 |
| Signature | unsigned |
| Tool |
Vendor: anchore Name: syft Version: 0.54.0 |
| Component |
bom-ref: af63bd4c8601b7f1 Type: file Name: . |
jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist ...
Incomplete fix for Apache Log4j vulnerability...
Polymorphic Typing issue in FasterXML jackson-databind...
jackson-databind polymorphic typing issue...
Deserialization of Untrusted Data in Apache commons collections...
Improper Input Validation in jackson-databind...
Deserialization of untrusted data in FasterXML jackson-databind...
Improper Input Validation in jackson-databind...
jackson-databind polymorphic typing issue...
jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist ...
Improper Input Validation in jackson-databind...
Improper Input Validation in jackson-databind...
jackson-databind polymorphic typing issue...
Polymorphic Typing issue in FasterXML jackson-databind...
Polymorphic Typing issue in FasterXML jackson-databind...
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | provided sbom is in a supported sbom format of spdx,cyclonedx | 10.0 |
|
| 2 | provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4 | 10.0 |
|
| 3 | provided sbom should be in supported file format for spec: json and version: json,xml | 10.0 |
|
| 4 | provided sbom is parsable | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | 0/978 have supplier names | 0.0 |
|
| 2 | 978/978 have names | 10.0 |
|
| 3 | 508/978 have versions | 5.2 |
|
| 4 | 978/978 have unique ID's | 10.0 |
|
| 5 | doc has 0 relationships | 0.0 |
|
| 6 | doc has 1 authors | 10.0 |
|
| 7 | doc has creation timestamp 2023-09-06T08:55:46-04:00 | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | Doc Fields:true Pkg Fields:true | 10.0 |
|
| 2 | 0/978 have licenses | 0.0 |
|
| 3 | 0/978 have checksums | 0.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | 0/978 components with valid license | 0.0 |
|
| 2 | 978/978 components have primary purpose specified | 10.0 |
|
| 3 | no licenses found | 0.0 |
|
| 4 | no licenses found | 0.0 |
|
| 5 | 976/978 components have any lookup id | 10.0 |
|
| 6 | 967/978 components have multiple lookup id | 9.9 |
|
| 7 | 1/1 tools have creator and version | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | doc has a sharable license free 0 :: of 0 | 0.0 |
|