github.com/google/osv-scalibr@v0.4.1/guidedremediation/internal/strategy/override/testdata/zeppelin-server/patches.json (about)

     1  [
     2    {
     3      "packageUpdates": [
     4        {
     5          "name": "io.atomix:atomix",
     6          "versionFrom": "",
     7          "versionTo": "3.1.6",
     8          "transitive": true
     9        }
    10      ],
    11      "fixed": [
    12        {
    13          "id": "GHSA-2fqw-684c-pvp7",
    14          "packages": [
    15            {
    16              "name": "io.atomix:atomix",
    17              "version": "3.0.0-rc5"
    18            }
    19          ]
    20        },
    21        {
    22          "id": "GHSA-4jhc-wjr3-pwh2",
    23          "packages": [
    24            {
    25              "name": "io.atomix:atomix",
    26              "version": "3.0.0-rc5"
    27            }
    28          ]
    29        },
    30        {
    31          "id": "GHSA-6vvh-5794-vpmj",
    32          "packages": [
    33            {
    34              "name": "io.atomix:atomix",
    35              "version": "3.0.0-rc5"
    36            }
    37          ]
    38        },
    39        {
    40          "id": "GHSA-7fr2-94h7-ccg2",
    41          "packages": [
    42            {
    43              "name": "io.atomix:atomix",
    44              "version": "3.0.0-rc5"
    45            }
    46          ]
    47        },
    48        {
    49          "id": "GHSA-g7p8-r2ch-4rmf",
    50          "packages": [
    51            {
    52              "name": "io.atomix:atomix",
    53              "version": "3.0.0-rc5"
    54            }
    55          ]
    56        },
    57        {
    58          "id": "GHSA-m4h3-7mc2-v295",
    59          "packages": [
    60            {
    61              "name": "io.atomix:atomix",
    62              "version": "3.0.0-rc5"
    63            }
    64          ]
    65        },
    66        {
    67          "id": "GHSA-mf27-wg66-m8f5",
    68          "packages": [
    69            {
    70              "name": "io.atomix:atomix",
    71              "version": "3.0.0-rc5"
    72            }
    73          ]
    74        }
    75      ],
    76      "introduced": [
    77        {
    78          "id": "GHSA-v2xm-76pq-phcf",
    79          "packages": [
    80            {
    81              "name": "io.github.classgraph:classgraph",
    82              "version": "4.2.3"
    83            }
    84          ]
    85        }
    86      ]
    87    },
    88    {
    89      "packageUpdates": [
    90        {
    91          "name": "org.apache.pdfbox:pdfbox",
    92          "versionFrom": "",
    93          "versionTo": "2.0.24",
    94          "transitive": true
    95        }
    96      ],
    97      "fixed": [
    98        {
    99          "id": "GHSA-2h3j-m7gr-25xj",
   100          "packages": [
   101            {
   102              "name": "org.apache.pdfbox:pdfbox",
   103              "version": "2.0.16"
   104            }
   105          ]
   106        },
   107        {
   108          "id": "GHSA-6vqp-h455-42mr",
   109          "packages": [
   110            {
   111              "name": "org.apache.pdfbox:pdfbox",
   112              "version": "2.0.16"
   113            }
   114          ]
   115        },
   116        {
   117          "id": "GHSA-7grw-6pjh-jpc9",
   118          "packages": [
   119            {
   120              "name": "org.apache.pdfbox:pdfbox",
   121              "version": "2.0.16"
   122            }
   123          ]
   124        },
   125        {
   126          "id": "GHSA-fg3j-q579-v8x4",
   127          "packages": [
   128            {
   129              "name": "org.apache.pdfbox:pdfbox",
   130              "version": "2.0.16"
   131            }
   132          ]
   133        }
   134      ]
   135    },
   136    {
   137      "packageUpdates": [
   138        {
   139          "name": "xerces:xercesImpl",
   140          "versionFrom": "",
   141          "versionTo": "2.12.2",
   142          "transitive": true
   143        }
   144      ],
   145      "fixed": [
   146        {
   147          "id": "GHSA-7j4h-8wpf-rqfh",
   148          "packages": [
   149            {
   150              "name": "xerces:xercesImpl",
   151              "version": "2.11.0"
   152            }
   153          ]
   154        },
   155        {
   156          "id": "GHSA-h65f-jvqw-m9fj",
   157          "packages": [
   158            {
   159              "name": "xerces:xercesImpl",
   160              "version": "2.11.0"
   161            }
   162          ]
   163        },
   164        {
   165          "id": "GHSA-vmqm-g3vh-847m",
   166          "packages": [
   167            {
   168              "name": "xerces:xercesImpl",
   169              "version": "2.11.0"
   170            }
   171          ]
   172        },
   173        {
   174          "id": "GHSA-w4jq-qh47-hvjq",
   175          "packages": [
   176            {
   177              "name": "xerces:xercesImpl",
   178              "version": "2.11.0"
   179            }
   180          ]
   181        }
   182      ]
   183    },
   184    {
   185      "packageUpdates": [
   186        {
   187          "name": "io.atomix:atomix",
   188          "versionFrom": "",
   189          "versionTo": "3.1.6",
   190          "transitive": true
   191        },
   192        {
   193          "name": "io.github.classgraph:classgraph",
   194          "versionFrom": "",
   195          "versionTo": "4.8.112",
   196          "transitive": true
   197        }
   198      ],
   199      "fixed": [
   200        {
   201          "id": "GHSA-2fqw-684c-pvp7",
   202          "packages": [
   203            {
   204              "name": "io.atomix:atomix",
   205              "version": "3.0.0-rc5"
   206            }
   207          ]
   208        },
   209        {
   210          "id": "GHSA-4jhc-wjr3-pwh2",
   211          "packages": [
   212            {
   213              "name": "io.atomix:atomix",
   214              "version": "3.0.0-rc5"
   215            }
   216          ]
   217        },
   218        {
   219          "id": "GHSA-6vvh-5794-vpmj",
   220          "packages": [
   221            {
   222              "name": "io.atomix:atomix",
   223              "version": "3.0.0-rc5"
   224            }
   225          ]
   226        },
   227        {
   228          "id": "GHSA-7fr2-94h7-ccg2",
   229          "packages": [
   230            {
   231              "name": "io.atomix:atomix",
   232              "version": "3.0.0-rc5"
   233            }
   234          ]
   235        },
   236        {
   237          "id": "GHSA-g7p8-r2ch-4rmf",
   238          "packages": [
   239            {
   240              "name": "io.atomix:atomix",
   241              "version": "3.0.0-rc5"
   242            }
   243          ]
   244        },
   245        {
   246          "id": "GHSA-m4h3-7mc2-v295",
   247          "packages": [
   248            {
   249              "name": "io.atomix:atomix",
   250              "version": "3.0.0-rc5"
   251            }
   252          ]
   253        },
   254        {
   255          "id": "GHSA-mf27-wg66-m8f5",
   256          "packages": [
   257            {
   258              "name": "io.atomix:atomix",
   259              "version": "3.0.0-rc5"
   260            }
   261          ]
   262        }
   263      ]
   264    },
   265    {
   266      "packageUpdates": [
   267        {
   268          "name": "com.google.guava:guava",
   269          "versionFrom": "",
   270          "versionTo": "32.0.0-jre",
   271          "transitive": true
   272        }
   273      ],
   274      "fixed": [
   275        {
   276          "id": "GHSA-5mg8-w23w-74h3",
   277          "packages": [
   278            {
   279              "name": "com.google.guava:guava",
   280              "version": "22.0"
   281            }
   282          ]
   283        },
   284        {
   285          "id": "GHSA-7g45-4rm6-3mm3",
   286          "packages": [
   287            {
   288              "name": "com.google.guava:guava",
   289              "version": "22.0"
   290            }
   291          ]
   292        },
   293        {
   294          "id": "GHSA-mvr2-9pj6-7w5j",
   295          "packages": [
   296            {
   297              "name": "com.google.guava:guava",
   298              "version": "22.0"
   299            }
   300          ]
   301        }
   302      ]
   303    },
   304    {
   305      "packageUpdates": [
   306        {
   307          "name": "xerces:xercesImpl",
   308          "versionFrom": "",
   309          "versionTo": "2.12.1",
   310          "transitive": true
   311        }
   312      ],
   313      "fixed": [
   314        {
   315          "id": "GHSA-7j4h-8wpf-rqfh",
   316          "packages": [
   317            {
   318              "name": "xerces:xercesImpl",
   319              "version": "2.11.0"
   320            }
   321          ]
   322        },
   323        {
   324          "id": "GHSA-vmqm-g3vh-847m",
   325          "packages": [
   326            {
   327              "name": "xerces:xercesImpl",
   328              "version": "2.11.0"
   329            }
   330          ]
   331        },
   332        {
   333          "id": "GHSA-w4jq-qh47-hvjq",
   334          "packages": [
   335            {
   336              "name": "xerces:xercesImpl",
   337              "version": "2.11.0"
   338            }
   339          ]
   340        }
   341      ]
   342    },
   343    {
   344      "packageUpdates": [
   345        {
   346          "name": "com.fasterxml.jackson.core:jackson-databind",
   347          "versionFrom": "2.12.6.1",
   348          "versionTo": "2.12.7.1",
   349          "transitive": false
   350        }
   351      ],
   352      "fixed": [
   353        {
   354          "id": "GHSA-jjjh-jjxp-wpff",
   355          "packages": [
   356            {
   357              "name": "com.fasterxml.jackson.core:jackson-databind",
   358              "version": "2.12.6.1"
   359            }
   360          ]
   361        },
   362        {
   363          "id": "GHSA-rgv9-q543-rqg4",
   364          "packages": [
   365            {
   366              "name": "com.fasterxml.jackson.core:jackson-databind",
   367              "version": "2.12.6.1"
   368            }
   369          ]
   370        }
   371      ]
   372    },
   373    {
   374      "packageUpdates": [
   375        {
   376          "name": "io.netty:netty-handler",
   377          "versionFrom": "",
   378          "versionTo": "4.1.94.Final",
   379          "transitive": true
   380        }
   381      ],
   382      "fixed": [
   383        {
   384          "id": "GHSA-6mjq-h674-j845",
   385          "packages": [
   386            {
   387              "name": "io.netty:netty-handler",
   388              "version": "4.1.27.Final"
   389            }
   390          ]
   391        },
   392        {
   393          "id": "GHSA-mm9x-g8pc-w292",
   394          "packages": [
   395            {
   396              "name": "io.netty:netty-handler",
   397              "version": "4.1.27.Final"
   398            }
   399          ]
   400        }
   401      ]
   402    },
   403    {
   404      "packageUpdates": [
   405        {
   406          "name": "org.apache.commons:commons-compress",
   407          "versionFrom": "",
   408          "versionTo": "1.26.0",
   409          "transitive": true
   410        }
   411      ],
   412      "fixed": [
   413        {
   414          "id": "GHSA-4265-ccf5-phj5",
   415          "packages": [
   416            {
   417              "name": "org.apache.commons:commons-compress",
   418              "version": "1.21"
   419            }
   420          ]
   421        },
   422        {
   423          "id": "GHSA-4g9r-vxhx-9pgx",
   424          "packages": [
   425            {
   426              "name": "org.apache.commons:commons-compress",
   427              "version": "1.21"
   428            }
   429          ]
   430        }
   431      ]
   432    },
   433    {
   434      "packageUpdates": [
   435        {
   436          "name": "org.apache.commons:commons-configuration2",
   437          "versionFrom": "2.8.0",
   438          "versionTo": "2.10.1",
   439          "transitive": true
   440        }
   441      ],
   442      "fixed": [
   443        {
   444          "id": "GHSA-9w38-p64v-xpmv",
   445          "packages": [
   446            {
   447              "name": "org.apache.commons:commons-configuration2",
   448              "version": "2.8.0"
   449            }
   450          ]
   451        },
   452        {
   453          "id": "GHSA-xjp4-hw94-mvp5",
   454          "packages": [
   455            {
   456              "name": "org.apache.commons:commons-configuration2",
   457              "version": "2.8.0"
   458            }
   459          ]
   460        }
   461      ]
   462    },
   463    {
   464      "packageUpdates": [
   465        {
   466          "name": "org.apache.mina:mina-core",
   467          "versionFrom": "",
   468          "versionTo": "2.0.22",
   469          "transitive": true
   470        }
   471      ],
   472      "fixed": [
   473        {
   474          "id": "GHSA-5h29-qq92-wj7f",
   475          "packages": [
   476            {
   477              "name": "org.apache.mina:mina-core",
   478              "version": "2.0.7"
   479            }
   480          ]
   481        },
   482        {
   483          "id": "GHSA-6mcm-j9cj-3vc3",
   484          "packages": [
   485            {
   486              "name": "org.apache.mina:mina-core",
   487              "version": "2.0.7"
   488            }
   489          ]
   490        }
   491      ]
   492    },
   493    {
   494      "packageUpdates": [
   495        {
   496          "name": "org.apache.pdfbox:pdfbox",
   497          "versionFrom": "",
   498          "versionTo": "2.0.23",
   499          "transitive": true
   500        }
   501      ],
   502      "fixed": [
   503        {
   504          "id": "GHSA-2h3j-m7gr-25xj",
   505          "packages": [
   506            {
   507              "name": "org.apache.pdfbox:pdfbox",
   508              "version": "2.0.16"
   509            }
   510          ]
   511        },
   512        {
   513          "id": "GHSA-6vqp-h455-42mr",
   514          "packages": [
   515            {
   516              "name": "org.apache.pdfbox:pdfbox",
   517              "version": "2.0.16"
   518            }
   519          ]
   520        }
   521      ]
   522    },
   523    {
   524      "packageUpdates": [
   525        {
   526          "name": "org.apache.shiro:shiro-web",
   527          "versionFrom": "1.10.0",
   528          "versionTo": "1.13.0",
   529          "transitive": false
   530        }
   531      ],
   532      "fixed": [
   533        {
   534          "id": "GHSA-hhw5-c326-822h",
   535          "packages": [
   536            {
   537              "name": "org.apache.shiro:shiro-web",
   538              "version": "1.10.0"
   539            }
   540          ]
   541        },
   542        {
   543          "id": "GHSA-pmhc-2g4f-85cg",
   544          "packages": [
   545            {
   546              "name": "org.apache.shiro:shiro-web",
   547              "version": "1.10.0"
   548            }
   549          ]
   550        }
   551      ]
   552    },
   553    {
   554      "packageUpdates": [
   555        {
   556          "name": "org.eclipse.jgit:org.eclipse.jgit",
   557          "versionFrom": "",
   558          "versionTo": "5.13.3.202401111512-r",
   559          "transitive": true
   560        }
   561      ],
   562      "fixed": [
   563        {
   564          "id": "GHSA-3p86-9955-h393",
   565          "packages": [
   566            {
   567              "name": "org.eclipse.jgit:org.eclipse.jgit",
   568              "version": "4.5.4.201711221230-r"
   569            }
   570          ]
   571        },
   572        {
   573          "id": "GHSA-q446-82vq-w674",
   574          "packages": [
   575            {
   576              "name": "com.jcraft:jsch",
   577              "version": "0.1.53"
   578            }
   579          ]
   580        }
   581      ]
   582    },
   583    {
   584      "packageUpdates": [
   585        {
   586          "name": "xerces:xercesImpl",
   587          "versionFrom": "",
   588          "versionTo": "2.12.0",
   589          "transitive": true
   590        }
   591      ],
   592      "fixed": [
   593        {
   594          "id": "GHSA-7j4h-8wpf-rqfh",
   595          "packages": [
   596            {
   597              "name": "xerces:xercesImpl",
   598              "version": "2.11.0"
   599            }
   600          ]
   601        },
   602        {
   603          "id": "GHSA-vmqm-g3vh-847m",
   604          "packages": [
   605            {
   606              "name": "xerces:xercesImpl",
   607              "version": "2.11.0"
   608            }
   609          ]
   610        }
   611      ]
   612    },
   613    {
   614      "packageUpdates": [
   615        {
   616          "name": "commons-net:commons-net",
   617          "versionFrom": "",
   618          "versionTo": "3.9.0",
   619          "transitive": true
   620        },
   621        {
   622          "name": "net.sourceforge.htmlunit:htmlunit",
   623          "versionFrom": "",
   624          "versionTo": "2.37.0",
   625          "transitive": true
   626        },
   627        {
   628          "name": "net.sourceforge.htmlunit:neko-htmlunit",
   629          "versionFrom": "",
   630          "versionTo": "2.61.0",
   631          "transitive": true
   632        }
   633      ],
   634      "fixed": [
   635        {
   636          "id": "GHSA-5mh9-r3rr-9597",
   637          "packages": [
   638            {
   639              "name": "net.sourceforge.htmlunit:htmlunit",
   640              "version": "2.18"
   641            }
   642          ]
   643        },
   644        {
   645          "id": "GHSA-7j4h-8wpf-rqfh",
   646          "packages": [
   647            {
   648              "name": "xerces:xercesImpl",
   649              "version": "2.11.0"
   650            }
   651          ]
   652        },
   653        {
   654          "id": "GHSA-h65f-jvqw-m9fj",
   655          "packages": [
   656            {
   657              "name": "xerces:xercesImpl",
   658              "version": "2.11.0"
   659            }
   660          ]
   661        },
   662        {
   663          "id": "GHSA-vmqm-g3vh-847m",
   664          "packages": [
   665            {
   666              "name": "xerces:xercesImpl",
   667              "version": "2.11.0"
   668            }
   669          ]
   670        },
   671        {
   672          "id": "GHSA-w4jq-qh47-hvjq",
   673          "packages": [
   674            {
   675              "name": "xerces:xercesImpl",
   676              "version": "2.11.0"
   677            }
   678          ]
   679        }
   680      ]
   681    },
   682    {
   683      "packageUpdates": [
   684        {
   685          "name": "net.sourceforge.htmlunit:htmlunit",
   686          "versionFrom": "",
   687          "versionTo": "2.37.0",
   688          "transitive": true
   689        }
   690      ],
   691      "fixed": [
   692        {
   693          "id": "GHSA-5mh9-r3rr-9597",
   694          "packages": [
   695            {
   696              "name": "net.sourceforge.htmlunit:htmlunit",
   697              "version": "2.18"
   698            }
   699          ]
   700        },
   701        {
   702          "id": "GHSA-7j4h-8wpf-rqfh",
   703          "packages": [
   704            {
   705              "name": "xerces:xercesImpl",
   706              "version": "2.11.0"
   707            }
   708          ]
   709        },
   710        {
   711          "id": "GHSA-vmqm-g3vh-847m",
   712          "packages": [
   713            {
   714              "name": "xerces:xercesImpl",
   715              "version": "2.11.0"
   716            }
   717          ]
   718        }
   719      ],
   720      "introduced": [
   721        {
   722          "id": "GHSA-6jmm-mp6w-4rrg",
   723          "packages": [
   724            {
   725              "name": "net.sourceforge.htmlunit:neko-htmlunit",
   726              "version": "2.37.0"
   727            }
   728          ]
   729        },
   730        {
   731          "id": "GHSA-cgp8-4m63-fhh5",
   732          "packages": [
   733            {
   734              "name": "commons-net:commons-net",
   735              "version": "3.6"
   736            }
   737          ]
   738        }
   739      ]
   740    },
   741    {
   742      "packageUpdates": [
   743        {
   744          "name": "com.google.guava:guava",
   745          "versionFrom": "",
   746          "versionTo": "24.1.1-jre",
   747          "transitive": true
   748        }
   749      ],
   750      "fixed": [
   751        {
   752          "id": "GHSA-mvr2-9pj6-7w5j",
   753          "packages": [
   754            {
   755              "name": "com.google.guava:guava",
   756              "version": "22.0"
   757            }
   758          ]
   759        }
   760      ]
   761    },
   762    {
   763      "packageUpdates": [
   764        {
   765          "name": "com.jcraft:jsch",
   766          "versionFrom": "",
   767          "versionTo": "0.1.54",
   768          "transitive": true
   769        }
   770      ],
   771      "fixed": [
   772        {
   773          "id": "GHSA-q446-82vq-w674",
   774          "packages": [
   775            {
   776              "name": "com.jcraft:jsch",
   777              "version": "0.1.53"
   778            }
   779          ]
   780        }
   781      ]
   782    },
   783    {
   784      "packageUpdates": [
   785        {
   786          "name": "com.nimbusds:nimbus-jose-jwt",
   787          "versionFrom": "9.13",
   788          "versionTo": "9.37.2",
   789          "transitive": false
   790        }
   791      ],
   792      "fixed": [
   793        {
   794          "id": "GHSA-gvpg-vgmx-xg6w",
   795          "packages": [
   796            {
   797              "name": "com.nimbusds:nimbus-jose-jwt",
   798              "version": "9.13"
   799            }
   800          ]
   801        }
   802      ]
   803    },
   804    {
   805      "packageUpdates": [
   806        {
   807          "name": "io.netty:netty",
   808          "versionFrom": "",
   809          "versionTo": "3.9.8.Final",
   810          "transitive": true
   811        }
   812      ],
   813      "fixed": [
   814        {
   815          "id": "GHSA-xfv3-rrfm-f2rv",
   816          "packages": [
   817            {
   818              "name": "io.netty:netty",
   819              "version": "3.5.2.Final"
   820            }
   821          ]
   822        }
   823      ]
   824    },
   825    {
   826      "packageUpdates": [
   827        {
   828          "name": "io.netty:netty-handler",
   829          "versionFrom": "",
   830          "versionTo": "4.1.46.Final",
   831          "transitive": true
   832        }
   833      ],
   834      "fixed": [
   835        {
   836          "id": "GHSA-mm9x-g8pc-w292",
   837          "packages": [
   838            {
   839              "name": "io.netty:netty-handler",
   840              "version": "4.1.27.Final"
   841            }
   842          ]
   843        }
   844      ]
   845    },
   846    {
   847      "packageUpdates": [
   848        {
   849          "name": "org.apache.directory.api:api-ldap-model",
   850          "versionFrom": "",
   851          "versionTo": "1.0.0-M31",
   852          "transitive": true
   853        }
   854      ],
   855      "fixed": [
   856        {
   857          "id": "GHSA-cx3q-cv6w-mx4h",
   858          "packages": [
   859            {
   860              "name": "org.apache.directory.api:api-ldap-model",
   861              "version": "1.0.0-M20"
   862            }
   863          ]
   864        }
   865      ]
   866    },
   867    {
   868      "packageUpdates": [
   869        {
   870          "name": "org.apache.mina:mina-core",
   871          "versionFrom": "",
   872          "versionTo": "2.0.21",
   873          "transitive": true
   874        }
   875      ],
   876      "fixed": [
   877        {
   878          "id": "GHSA-5h29-qq92-wj7f",
   879          "packages": [
   880            {
   881              "name": "org.apache.mina:mina-core",
   882              "version": "2.0.7"
   883            }
   884          ]
   885        }
   886      ]
   887    },
   888    {
   889      "packageUpdates": [
   890        {
   891          "name": "org.apache.shiro:shiro-core",
   892          "versionFrom": "1.10.0",
   893          "versionTo": "1.13.0",
   894          "transitive": false
   895        }
   896      ],
   897      "fixed": [
   898        {
   899          "id": "GHSA-jc7h-c423-mpjc",
   900          "packages": [
   901            {
   902              "name": "org.apache.shiro:shiro-core",
   903              "version": "1.10.0"
   904            }
   905          ]
   906        }
   907      ]
   908    },
   909    {
   910      "packageUpdates": [
   911        {
   912          "name": "org.apache.shiro:shiro-web",
   913          "versionFrom": "1.10.0",
   914          "versionTo": "1.12.0",
   915          "transitive": false
   916        }
   917      ],
   918      "fixed": [
   919        {
   920          "id": "GHSA-pmhc-2g4f-85cg",
   921          "packages": [
   922            {
   923              "name": "org.apache.shiro:shiro-web",
   924              "version": "1.10.0"
   925            }
   926          ]
   927        }
   928      ]
   929    },
   930    {
   931      "packageUpdates": [
   932        {
   933          "name": "org.glassfish.jersey.core:jersey-common",
   934          "versionFrom": "",
   935          "versionTo": "2.34",
   936          "transitive": true
   937        }
   938      ],
   939      "fixed": [
   940        {
   941          "id": "GHSA-c43q-5hpj-4crv",
   942          "packages": [
   943            {
   944              "name": "org.glassfish.jersey.core:jersey-common",
   945              "version": "2.30"
   946            }
   947          ]
   948        }
   949      ]
   950    },
   951    {
   952      "packageUpdates": [
   953        {
   954          "name": "xalan:xalan",
   955          "versionFrom": "",
   956          "versionTo": "2.7.3",
   957          "transitive": true
   958        }
   959      ],
   960      "fixed": [
   961        {
   962          "id": "GHSA-9339-86wc-4qgf",
   963          "packages": [
   964            {
   965              "name": "xalan:xalan",
   966              "version": "2.7.2"
   967            }
   968          ]
   969        }
   970      ]
   971    },
   972    {
   973      "packageUpdates": [
   974        {
   975          "name": "org.apache.thrift:libthrift",
   976          "versionFrom": "0.13.0",
   977          "versionTo": "0.14.0",
   978          "transitive": true
   979        },
   980        {
   981          "name": "org.apache.tomcat.embed:tomcat-embed-core",
   982          "versionFrom": "",
   983          "versionTo": "8.5.99",
   984          "transitive": true
   985        }
   986      ],
   987      "fixed": [
   988        {
   989          "id": "GHSA-g2fg-mr77-6vrm",
   990          "packages": [
   991            {
   992              "name": "org.apache.thrift:libthrift",
   993              "version": "0.13.0"
   994            }
   995          ]
   996        }
   997      ]
   998    },
   999    {
  1000      "packageUpdates": [
  1001        {
  1002          "name": "io.netty:netty-codec",
  1003          "versionFrom": "",
  1004          "versionTo": "4.1.68.Final",
  1005          "transitive": true
  1006        }
  1007      ],
  1008      "fixed": []
  1009    },
  1010    {
  1011      "packageUpdates": [
  1012        {
  1013          "name": "io.netty:netty-handler",
  1014          "versionFrom": "",
  1015          "versionTo": "4.1.45.Final",
  1016          "transitive": true
  1017        }
  1018      ],
  1019      "fixed": []
  1020    },
  1021    {
  1022      "packageUpdates": [
  1023        {
  1024          "name": "org.apache.thrift:libthrift",
  1025          "versionFrom": "0.13.0",
  1026          "versionTo": "0.14.0",
  1027          "transitive": true
  1028        }
  1029      ],
  1030      "fixed": [
  1031        {
  1032          "id": "GHSA-g2fg-mr77-6vrm",
  1033          "packages": [
  1034            {
  1035              "name": "org.apache.thrift:libthrift",
  1036              "version": "0.13.0"
  1037            }
  1038          ]
  1039        }
  1040      ],
  1041      "introduced": [
  1042        {
  1043          "id": "GHSA-2rvv-w9r2-rg7m",
  1044          "packages": [
  1045            {
  1046              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1047              "version": "8.5.46"
  1048            }
  1049          ]
  1050        },
  1051        {
  1052          "id": "GHSA-7w75-32cg-r6g2",
  1053          "packages": [
  1054            {
  1055              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1056              "version": "8.5.46"
  1057            }
  1058          ]
  1059        },
  1060        {
  1061          "id": "GHSA-9xcj-c8cr-8c3c",
  1062          "packages": [
  1063            {
  1064              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1065              "version": "8.5.46"
  1066            }
  1067          ]
  1068        },
  1069        {
  1070          "id": "GHSA-c9hw-wf7x-jp9j",
  1071          "packages": [
  1072            {
  1073              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1074              "version": "8.5.46"
  1075            }
  1076          ]
  1077        },
  1078        {
  1079          "id": "GHSA-f4qf-m5gf-8jm8",
  1080          "packages": [
  1081            {
  1082              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1083              "version": "8.5.46"
  1084            }
  1085          ]
  1086        },
  1087        {
  1088          "id": "GHSA-fccv-jmmp-qg76",
  1089          "packages": [
  1090            {
  1091              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1092              "version": "8.5.46"
  1093            }
  1094          ]
  1095        },
  1096        {
  1097          "id": "GHSA-g8pj-r55q-5c2v",
  1098          "packages": [
  1099            {
  1100              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1101              "version": "8.5.46"
  1102            }
  1103          ]
  1104        },
  1105        {
  1106          "id": "GHSA-hh3j-x4mc-g48r",
  1107          "packages": [
  1108            {
  1109              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1110              "version": "8.5.46"
  1111            }
  1112          ]
  1113        },
  1114        {
  1115          "id": "GHSA-j39c-c8hj-x4j3",
  1116          "packages": [
  1117            {
  1118              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1119              "version": "8.5.46"
  1120            }
  1121          ]
  1122        },
  1123        {
  1124          "id": "GHSA-jgwr-3qm3-26f3",
  1125          "packages": [
  1126            {
  1127              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1128              "version": "8.5.46"
  1129            }
  1130          ]
  1131        },
  1132        {
  1133          "id": "GHSA-p22x-g9px-3945",
  1134          "packages": [
  1135            {
  1136              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1137              "version": "8.5.46"
  1138            }
  1139          ]
  1140        },
  1141        {
  1142          "id": "GHSA-q3mw-pvr8-9ggc",
  1143          "packages": [
  1144            {
  1145              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1146              "version": "8.5.46"
  1147            }
  1148          ]
  1149        },
  1150        {
  1151          "id": "GHSA-qppj-fm5r-hxr3",
  1152          "packages": [
  1153            {
  1154              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1155              "version": "8.5.46"
  1156            }
  1157          ]
  1158        },
  1159        {
  1160          "id": "GHSA-qxf4-chvg-4r8r",
  1161          "packages": [
  1162            {
  1163              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1164              "version": "8.5.46"
  1165            }
  1166          ]
  1167        },
  1168        {
  1169          "id": "GHSA-r6j3-px5g-cq3x",
  1170          "packages": [
  1171            {
  1172              "name": "org.apache.tomcat.embed:tomcat-embed-core",
  1173              "version": "8.5.46"
  1174            }
  1175          ]
  1176        }
  1177      ]
  1178    }
  1179  ]