This line in the build file for the Vertex module is triggering a warning about a security vulnerability:
api(platform("com.google.auth:google-auth-library-bom:1.32.1"))
It is referencing the latest stable release of the BOM. It seems to be caused by a transitive dependency on maven:commons-codec:commons-codec:1.11 explained as follows:
WS-2019-0379, Score: 6.5
Apache commons-codec before version ?commons-codec-1.13-RC1? is vulnerable to information disclosure due to Improper Input validation.
Is there anything about that vulnerability that should concern us?
This line in the build file for the Vertex module is triggering a warning about a security vulnerability:
It is referencing the latest stable release of the BOM. It seems to be caused by a transitive dependency on
maven:commons-codec:commons-codec:1.11explained as follows:Is there anything about that vulnerability that should concern us?