Poetry
JFrog report shows multiple Critical and High vulnerabilities #10159
-
|
Any plan to fix this vulnerabilities which are almost old as 5 years. |
Beta Was this translation helpful? Give feedback.
Answered by
Secrus
Feb 7, 2025
Replies: 2 comments
-
|
Those most likely come from our test suite, which uses those declarations to test various dependency management solutions. None of the code from those packages is used in app runtime. Mark all as false-positives. |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
AVandana-1806
-
|
Thank you @Secrus for quick response. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Those most likely come from our test suite, which uses those declarations to test various dependency management solutions. None of the code from those packages is used in app runtime. Mark all as false-positives.