Skip to main content

Changes in Update Released on 23-Dec-2021

This Update includes the changes described in the following sections.

Issues/Bugs Addressed​

The following issues were addressed in the Update:

Updates to Apache log4j2 Component​

  • Updated vulnerability information for log4j2 component (CVE-2021-44228,CVE-2021-45046,CVE-2021-4104).

  • Updated versions for the log4j2 components.

    Issue IDIssue Summary
    SCA-38791Updated missing vulnerabilities for nuget top 100 component
    SCA-35846Enhancements to Nuget Collector for Version-Level License Collection

Addition of Missing Vulnerability Mappings​

Missing vulnerability mappings for the following components were added:

  • consul

  • uri.js

  • chatwoot

  • bat

  • cgm-remote-monitor

  • connect

  • muwire

  • containerd

  • discourse

  • micronaut

  • gatsby-source-wordpress

  • venus_os

Updated Components List​

  • world-clock-and-the-timezoneinformation-class