Hello! There exists vulnerable dependency in your project. Are you aware of it?

[ghost]

Hello! I find a vulnerable dependency in your project, and I find its vulnerable method can be easily accessed from your project. Therefore, maybe you need to upgrade this dependency.

• CVE_ID: CVE-2022-33980
• Vulnerable dependency: org.apache.commons:commons-configuration2
• Your invocation path to the vulnerable method:

de.julielab.jcore.db.test.DBTestUtils:createTestCostosysConfig(java.lang.String,java.lang.String,int,org.testcontainers.containers.PostgreSQLContainer)
⬇️
org.apache.commons.configuration2.XMLConfiguration:<init>()
⬇️
...
⬇️
org.apache.commons.configuration2.interpol.ConfigurationInterpolator:getDefaultPrefixLookups()

Hope this can help you! 😄