{
  "_class" : "io.jenkins.plugins.analysis.core.restapi.ReportApi",
  "issues" : [
    {
      "addedAt" : 0,
      "authorEmail" : "-",
      "authorName" : "-",
      "baseName" : "spring-security-web-5.8.16.jar",
      "category" : "",
      "columnEnd" : 0,
      "columnStart" : 0,
      "commit" : "-",
      "description" : "",
      "fileName" : "govway//usr/local/tomcat/webapps/govwayAPIConfig.war:WEB-INF/lib/spring-security-web-5.8.16.jar",
      "fingerprint" : "FALLBACK-c16a9732",
      "lineEnd" : 1,
      "lineStart" : 1,
      "message" : "GHSA-mf92-479x-3373-spring-security-web: JavaMatcherExactDirectMatch\u000a\u000aGHSA-mf92-479x-3373 critical vulnerability for spring-security-web package\u000a\u000aFor additional help see: **Vulnerability GHSA-mf92-479x-3373**\u000a| Severity | Package | Version | Fix Version | Type | Location | Data Namespace | Link |\u000a| --- | --- | --- | --- | --- | --- | --- | --- |\u000a| critical  | spring-security-web  | 5.8.16  |   | java-archive  | /usr/local/tomcat/webapps/govwayAPIMonitor.war:WEB-INF/lib/spring-security-web-5.8.16.jar  | github:language:java  | [GHSA-mf92-479x-3373](https://github.com/advisories/GHSA-mf92-479x-3373)  |\u000a\u000a\u000aA critical vulnerability in java-archive package: spring-security-web, version 5.8.16 was found in image linkitaly/govway:master at: /usr/local/tomcat/webapps/govwayAPIConfig.war:WEB-INF/lib/spring-security-web-5.8.16.jar",
      "moduleName" : "",
      "origin" : "grype",
      "originName" : "Grype Security Scanner",
      "packageName" : "-",
      "reference" : "1390",
      "severity" : "HIGH",
      "toString" : "spring-security-web-5.8.16.jar(1,0): GHSA-mf92-479x-3373-spring-security-web: : GHSA-mf92-479x-3373-spring-security-web: JavaMatcherExactDirectMatch\u000a\u000aGHSA-mf92-479x-3373 critical vulnerability for spring-security-web package\u000a\u000aFor additional help see: **Vulnerability GHSA-mf92-479x-3373**\u000a| Severity | Package | Version | Fix Version | Type | Location | Data Namespace | Link |\u000a| --- | --- | --- | --- | --- | --- | --- | --- |\u000a| critical  | spring-security-web  | 5.8.16  |   | java-archive  | /usr/local/tomcat/webapps/govwayAPIMonitor.war:WEB-INF/lib/spring-security-web-5.8.16.jar  | github:language:java  | [GHSA-mf92-479x-3373](https://github.com/advisories/GHSA-mf92-479x-3373)  |\u000a\u000a\u000aA critical vulnerability in java-archive package: spring-security-web, version 5.8.16 was found in image linkitaly/govway:master at: /usr/local/tomcat/webapps/govwayAPIConfig.war:WEB-INF/lib/spring-security-web-5.8.16.jar",
      "type" : "GHSA-mf92-479x-3373-spring-security-web"
    }
  ],
  "size" : 1,
  "toString" : "1 warning (high: 1)"
}