Skip to content

Introduce RunningTracker SPI for the queue running counter (capacity PoC, PR1) - #217

Open
vibe13 wants to merge 4 commits into
masterfrom
test-capacity-poc
Open

Introduce RunningTracker SPI for the queue running counter (capacity PoC, PR1)#217
vibe13 wants to merge 4 commits into
masterfrom
test-capacity-poc

Introduce RunningTracker SPI for the queue running counter (capacity …

29e3018
Select commit
Loading
Failed to load commit list.
Sign in for the full log view
GitHub Actions / Mend CLI scan succeeded Oct 10, 2026 in 1m 57s

Mend CLI scan

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output 



Identified 345 dependencies

Detected 23 vulnerabilities (0 Critical, 15 High, 7 Medium, 1 Low)

+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |                    LIBRARY                    |       ID       |                                               TOP FIX                                                |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.22.2.jar                       | CVE-2026-89407 | Upgrade to version com.fasterxml.jackson.core:jackson-core:2.18.11,                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-core:2.21.7,com.fasterxml.jackson.core:jackson-core:2.22.3,       |
|          |                                               |                | tools.jackson.core:jackson-core:3.1.7, https://github.com/FasterXML/jackson-core.git -               |
|          |                                               |                | jackson-core-2.22.3, https://github.com/FasterXML/jackson-core.git - jackson-core-3.2.2,             |
|          |                                               |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.11,                                |
|          |                                               |                | https://github.com/FasterXML/jackson-core.git - jackson-core-3.1.7,                                  |
|          |                                               |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.7                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.22.2.jar                       | CVE-2026-89425 | Upgrade to version com.fasterxml.jackson.core:jackson-core:2.18.11,                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-core:2.21.7,com.fasterxml.jackson.core:jackson-core:2.22.3,       |
|          |                                               |                | tools.jackson.core:jackson-core:3.1.7, https://github.com/FasterXML/jackson-core.git -               |
|          |                                               |                | jackson-core-3.2.3, https://github.com/FasterXML/jackson-core.git - jackson-core-2.22.3,             |
|          |                                               |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.7,                                 |
|          |                                               |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.11,                                |
|          |                                               |                | https://github.com/FasterXML/jackson-core.git - jackson-core-3.1.7                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.22.2.jar                   | CVE-2026-91776 | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.18.11,                              |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.21.7,tools.jackson.core:jackson-databind:3.1.7,        |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.3,                         |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.11,                        |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.7,                         |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.7,                          |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.3                           |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.22.2.jar                   | CVE-2026-91777 | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.18.11,                              |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.21.7,tools.jackson.core:jackson-databind:3.1.7,        |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.7,                         |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.3,                          |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.3,                         |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.11,                        |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.7                           |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-haproxy-4.1.137.Final.jar         | CVE-2026-93564 | Upgrade to version io.netty:netty-codec-haproxy:4.1.138.Final, https://github.com/netty/netty.git -  |
|          |                                               |                | netty-4.1.138.Final, https://github.com/netty/netty.git - netty-4.2.18.Final,                        |
|          |                                               |                | io.netty:netty-codec-haproxy:4.2.18.Final,io.netty:netty-all:4.1.138.Final                           |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.137.Final.jar            | CVE-2026-93558 | Upgrade to version io.netty:netty-codec-http:4.1.138.Final,io.netty:netty-codec-http:4.2.18.Final,   |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.138.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.18.Final                                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.137.Final.jar            | CVE-2026-93565 | Upgrade to version io.netty:netty-codec-http:4.2.18.Final,io.netty:netty-codec-http:4.1.138.Final,   |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.138.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.18.Final,io.netty:netty-all:4.1.138.Final                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.137.Final.jar           | CVE-2026-93567 | Upgrade to version io.netty:netty-codec-http2:4.1.138.Final,io.netty:netty-all:4.1.138.Final,        |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.138.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.18.Final,io.netty:netty-codec-http2:4.2.18.Final                                           |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.137.Final.jar           | CVE-2026-93568 | Upgrade to version io.netty:netty-codec-http2:4.1.138.Final,io.netty:netty-all:4.1.138.Final,        |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.2.18.Final, https://github.com/netty/netty.git -        |
|          |                                               |                | netty-4.1.138.Final,io.netty:netty-codec-http2:4.2.18.Final,io.netty:netty-codec-http3:4.2.18.Final  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.137.Final.jar           | CVE-2026-93569 | Upgrade to version io.netty:netty-codec-http2:4.1.138.Final,io.netty:netty-codec-http2:4.2.18.Final, |
|          |                                               |                | io.netty:netty-all:4.1.138.Final, https://github.com/netty/netty.git - netty-4.1.138.Final,          |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.2.18.Final                                              |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | quarkus-vertx-http-3.39.3.jar                 | CVE-2026-87743 | Upgrade to version io.quarkus:quarkus-vertx-http:3.27.5.3,io.quarkus:quarkus-vertx-http:3.33.3.3,    |
|          |                                               |                | io.quarkus:quarkus-vertx-http:3.39.5, https://github.com/quarkusio/quarkus.git - 3.40.0,             |
|          |                                               |                | https://github.com/quarkusio/quarkus.git - 3.33.3.3, https://github.com/quarkusio/quarkus.git -      |
|          |                                               |                | 3.27.5.3, https://github.com/quarkusio/quarkus.git - 3.39.5,io.quarkus:quarkus-vertx-http:3.40.0     |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | resteasy-core-6.2.18.Final.jar                | CVE-2026-89058 | Upgrade to version org.jboss.resteasy:resteasy-core:7.0.5.Final,                                     |
|          |                                               |                | org.jboss.resteasy:resteasy-core:6.2.19.Final, https://github.com/resteasy/resteasy.git -            |
|          |                                               |                | v7.0.5.Final, https://github.com/resteasy/resteasy.git - v6.2.19.Final                               |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | resteasy-core-6.2.18.Final.jar                | CVE-2026-89059 | Upgrade to version org.jboss.resteasy:resteasy-core:7.0.5.Final,                                     |
|          |                                               |                | org.jboss.resteasy:resteasy-core:6.2.19.Final, https://github.com/resteasy/resteasy.git -            |
|          |                                               |                | v6.2.19.Final, https://github.com/resteasy/resteasy.git - v7.0.5.Final                               |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | smallrye-fault-tolerance-core-6.11.2.jar      | CVE-2026-94449 | Upgrade to version  https://github.com/smallrye/smallrye-fault-tolerance.git - 6.9.4,                |
|          |                                               |                | https://github.com/smallrye/smallrye-fault-tolerance.git - 6.11.4,                                   |
|          |                                               |                | https://github.com/smallrye/smallrye-fault-tolerance.git - 6.10.2,                                   |
|          |                                               |                | https://github.com/smallrye/smallrye-fault-tolerance.git - 7.0.0,                                    |
|          |                                               |                | io.smallrye:smallrye-fault-tolerance-core:6.9.4,io.smallrye:smallrye-fault-tolerance-core:6.10.2,    |
|          |                                               |                | io.smallrye:smallrye-fault-tolerance-core:6.11.4,io.smallrye:smallrye-fault-tolerance-core:7.0.0     |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | wildfly-elytron-password-impl-2.9.2.Final.jar | CVE-2026-19611 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.137.Final.jar            | CVE-2026-89044 | Upgrade to version io.netty:netty-codec-http:4.1.138.Final,io.netty:netty-codec-http:4.2.18.Final,   |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.2.18.Final, https://github.com/netty/netty.git -        |
|          |                                               |                | netty-4.1.138.Final                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.137.Final.jar            | CVE-2026-93566 | Upgrade to version io.netty:netty-codec-http:4.1.138.Final,io.netty:netty-all:4.1.138.Final,         |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.2.18.Final, https://github.com/netty/netty.git -        |
|          |                                               |                | netty-4.1.138.Final,io.netty:netty-codec-http:4.2.18.Final                                           |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.137.Final.jar            | CVE-2026-93573 | Upgrade to version io.netty:netty-codec-http:4.1.138.Final,io.netty:netty-codec-http:4.2.18.Final,   |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.138.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.18.Final                                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http2-4.1.137.Final.jar           | CVE-2026-93492 | Upgrade to version io.netty:netty-codec-http2:4.1.138.Final,io.netty:netty-codec-http2:4.2.18.Final, |
|          |                                               |                | io.netty:netty-all:4.1.138.Final, https://github.com/netty/netty.git - netty-4.2.18.Final,           |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.138.Final                                             |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http2-4.1.137.Final.jar           | CVE-2026-93579 | Upgrade to version io.netty:netty-codec-http2:4.1.138.Final, https://github.com/netty/netty.git -    |
|          |                                               |                | netty-4.2.18.Final,io.netty:netty-codec-http2:4.2.18.Final, https://github.com/netty/netty.git -     |
|          |                                               |                | netty-4.1.138.Final,io.netty:netty-all:4.1.138.Final                                                 |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | smallrye-jwt-4.6.3.jar                        | CVE-2026-81829 | Upgrade to version io.smallrye:smallrye-jwt:4.6.4, https://github.com/smallrye/smallrye-jwt.git -    |
|          |                                               |                | 4.6.4                                                                                                |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | wildfly-elytron-asn1-2.9.2.Final.jar          | CVE-2026-10832 | Upgrade to version  https://github.com/wildfly-security/wildfly-elytron.git - 2.6.11.Final,          |
|          |                                               |                | https://github.com/wildfly-security/wildfly-elytron.git - 2.8.6.Final,                               |
|          |                                               |                | https://github.com/wildfly-security/wildfly-elytron.git - 2.9.3.Final,                               |
|          |                                               |                | org.wildfly.security:wildfly-elytron-asn1:2.6.11.Final,                                              |
|          |                                               |                | org.wildfly.security:wildfly-elytron-asn1:2.8.6.Final,                                               |
|          |                                               |                | org.wildfly.security:wildfly-elytron-asn1:2.9.3.Final,                                               |
|          |                                               |                | org.wildfly.security:wildfly-elytron:2.6.11.Final,org.wildfly.security:wildfly-elytron:2.8.6.Final,  |
|          |                                               |                | org.wildfly.security:wildfly-elytron:2.9.3.Final                                                     |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| LOW      | LatencyUtils-2.0.3.jar                        | CVE-2026-82596 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

rest-client-1.2.4-SNAPSHOT.jar
|-- quarkus-openapi-generator-oidc-2.23.0.jar
	|-- resteasy-core-6.2.18.Final.jar [2 HIGH]
|-- quarkus-openapi-generator-2.23.0-codestarts.jar
	|-- io.quarkus.quarkus-oidc-common-3.39.3.jar
		|-- smallrye-mutiny-vertx-web-client-3.23.0.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- vertx-core-4.5.33.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
				|-- netty-codec-haproxy-4.1.137.Final.jar [1 HIGH]
				|-- netty-codec-http2-4.1.137.Final.jar [3 HIGH, 2 MEDIUM]
					|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
				|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
				|-- netty-handler-proxy-4.1.137.Final.jar
					|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
			|-- vertx-web-client-4.5.33.jar
				|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- resteasy-core-6.2.18.Final.jar [2 HIGH]
|-- quarkus-rest-client-jackson-3.39.3.jar
	|-- resteasy-reactive-jackson-3.39.3.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- quarkus-rest-jackson-common-3.39.3.jar
		|-- quarkus-jackson-3.39.3.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-datatype-jdk8-2.22.2.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-datatype-jsr310-2.22.2.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-module-parameter-names-2.22.2.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- quarkus-resteasy-client-oidc-filter-3.39.3.jar
	|-- quarkus-oidc-client-3.39.3.jar
		|-- quarkus-vertx-3.39.3.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- netty-codec-haproxy-4.1.137.Final.jar [1 HIGH]
			|-- quarkus-netty-3.39.3.jar
				|-- netty-codec-http2-4.1.137.Final.jar [3 HIGH, 2 MEDIUM]
				|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
			|-- smallrye-mutiny-vertx-core-3.23.0.jar
				|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- quarkus-resteasy-client-3.39.3.jar
		|-- quarkus-resteasy-common-3.39.3.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- microprofile-config-3.0.1.Final.jar
				|-- resteasy-core-6.2.18.Final.jar [2 HIGH]
			|-- resteasy-core-6.2.18.Final.jar [2 HIGH]
		|-- microprofile-rest-client-3.0.1.Final.jar
			|-- resteasy-client-6.2.18.Final.jar
				|-- resteasy-core-6.2.18.Final.jar [2 HIGH]
		|-- resteasy-multipart-provider-6.2.18.Final.jar
			|-- resteasy-core-6.2.18.Final.jar [2 HIGH]
			|-- resteasy-jaxb-provider-6.2.18.Final.jar
				|-- resteasy-core-6.2.18.Final.jar [2 HIGH]
|-- pnc-api-3.5.2-jakarta.jar
	|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
rex-api-1.2.4-SNAPSHOT.jar
|-- quarkus-smallrye-openapi-3.39.3.jar
	|-- quarkus-swagger-ui-3.39.3.jar
		|-- quarkus-vertx-http-3.39.3.jar [1 HIGH]
	|-- quarkus-vertx-http-3.39.3.jar [1 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- quarkus-vertx-3.39.3.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- netty-codec-haproxy-4.1.137.Final.jar [1 HIGH]
			|-- quarkus-netty-3.39.3.jar
				|-- netty-codec-http2-4.1.137.Final.jar [3 HIGH, 2 MEDIUM]
					|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
				|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
		|-- smallrye-common-vertx-context-2.19.0.jar
			|-- vertx-core-4.5.33.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
				|-- netty-codec-haproxy-4.1.137.Final.jar [1 HIGH]
				|-- netty-codec-http2-4.1.137.Final.jar [3 HIGH, 2 MEDIUM]
				|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
				|-- netty-handler-proxy-4.1.137.Final.jar
					|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
		|-- smallrye-mutiny-vertx-web-3.23.0.jar
			|-- smallrye-mutiny-vertx-core-3.23.0.jar
				|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- vertx-web-4.5.33.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- smallrye-open-api-core-4.3.5.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-dataformat-yaml-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- rex-dto-1.2.4-SNAPSHOT.jar
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-core-2.22.2.jar [2 HIGH]
rex-common-1.2.4-SNAPSHOT.jar
|-- quarkus-infinispan-client-3.39.3.jar
	|-- quarkus-elytron-security-common-3.39.3.jar
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
	|-- quarkus-netty-3.39.3.jar
		|-- netty-codec-http2-4.1.137.Final.jar [3 HIGH, 2 MEDIUM]
			|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
		|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
	|-- protostream-processor-6.0.7.jar
		|-- protostream-6.0.7.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- infinispan-client-hotrod-16.0.14.jar
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
		|-- wildfly-elytron-sasl-gs2-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
	|-- wildfly-elytron-sasl-plain-2.9.2.Final.jar
		|-- wildfly-elytron-credential-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
			|-- wildfly-elytron-keystore-2.9.2.Final.jar
				|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
			|-- wildfly-elytron-x500-2.9.2.Final.jar
				|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
	|-- wildfly-elytron-sasl-scram-2.9.2.Final.jar
		|-- wildfly-elytron-mechanism-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
		|-- wildfly-elytron-util-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
	|-- wildfly-elytron-ssh-util-2.9.2.Final.jar
		|-- wildfly-elytron-x500-cert-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
			|-- wildfly-elytron-x500-cert-util-2.9.2.Final.jar
				|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
rex-core-1.2.4-SNAPSHOT.jar
|-- quarkus-elytron-security-ldap-3.39.3.jar
	|-- quarkus-elytron-security-3.39.3.jar
		|-- quarkus-vertx-http-3.39.3.jar [1 HIGH]
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
	|-- wildfly-elytron-realm-ldap-2.9.2.Final.jar
		|-- wildfly-elytron-client-2.9.2.Final.jar
			|-- wildfly-elytron-credential-source-impl-2.9.2.Final.jar
				|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
			|-- wildfly-elytron-credential-store-2.9.2.Final.jar
				|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
				|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
			|-- wildfly-elytron-keystore-2.9.2.Final.jar
				|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
			|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
		|-- wildfly-elytron-credential-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
		|-- wildfly-elytron-realm-2.9.2.Final.jar
			|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
|-- quarkus-hibernate-validator-3.39.3.jar
	|-- quarkus-vertx-http-3.39.3.jar [1 HIGH]
|-- quarkus-infinispan-client-3.39.3.jar
	|-- quarkus-elytron-security-common-3.39.3.jar
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
	|-- protostream-processor-6.0.7.jar
		|-- protostream-6.0.7.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- infinispan-client-hotrod-16.0.14.jar
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
		|-- wildfly-elytron-sasl-gs2-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
	|-- wildfly-elytron-sasl-scram-2.9.2.Final.jar
		|-- wildfly-elytron-auth-server-2.9.2.Final.jar
			|-- wildfly-elytron-x500-2.9.2.Final.jar
				|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
		|-- wildfly-elytron-mechanism-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
		|-- wildfly-elytron-util-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
	|-- wildfly-elytron-ssh-util-2.9.2.Final.jar
		|-- wildfly-elytron-x500-cert-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
			|-- wildfly-elytron-x500-cert-util-2.9.2.Final.jar
				|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
|-- quarkus-micrometer-opentelemetry-3.39.3.jar
	|-- quarkus-micrometer-3.39.3.jar
		|-- quarkus-vertx-http-3.39.3.jar [1 HIGH]
		|-- LatencyUtils-2.0.3.jar [1 LOW]
	|-- io.quarkus.quarkus-opentelemetry-3.39.3.jar
		|-- io.quarkus.quarkus-grpc-common-3.39.3.jar
			|-- vertx-grpc-4.5.33.jar
				|-- grpc-netty-1.81.0.jar
					|-- netty-codec-http2-4.1.137.Final.jar [3 HIGH, 2 MEDIUM]
|-- quarkus-narayana-jta-3.39.3.jar
	|-- narayana-jta-7.3.4.Final.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
|-- quarkus-oidc-3.39.3.jar
	|-- quarkus-vertx-http-3.39.3.jar [1 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- vertx-web-4.5.33.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- smallrye-jwt-4.6.3.jar [1 MEDIUM]
|-- quarkus-rest-jackson-3.39.3.jar
	|-- quarkus-rest-jackson-common-3.39.3.jar
		|-- resteasy-reactive-jackson-3.39.3.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- quarkus-jackson-3.39.3.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-datatype-jdk8-2.22.2.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-datatype-jsr310-2.22.2.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-module-parameter-names-2.22.2.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- quarkus-rest-3.39.3.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- quarkus-vertx-http-3.39.3.jar [1 HIGH]
|-- quarkus-smallrye-fault-tolerance-3.39.3.jar
	|-- smallrye-fault-tolerance-mutiny-6.11.2.jar
		|-- smallrye-fault-tolerance-core-6.11.2.jar [1 HIGH]
	|-- smallrye-fault-tolerance-6.11.2.jar
		|-- smallrye-fault-tolerance-apiimpl-6.11.2.jar
			|-- smallrye-fault-tolerance-core-6.11.2.jar [1 HIGH]
		|-- smallrye-fault-tolerance-core-6.11.2.jar [1 HIGH]
|-- quarkus-smallrye-health-3.39.3.jar
	|-- quarkus-vertx-http-3.39.3.jar [1 HIGH]
|-- quarkus-smallrye-openapi-3.39.3.jar
	|-- quarkus-swagger-ui-3.39.3.jar
		|-- quarkus-vertx-http-3.39.3.jar [1 HIGH]
	|-- quarkus-vertx-http-3.39.3.jar [1 HIGH]
	|-- smallrye-open-api-core-4.3.5.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- quarkus-vertx-3.39.3.jar
	|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- netty-codec-haproxy-4.1.137.Final.jar [1 HIGH]
	|-- quarkus-netty-3.39.3.jar
		|-- netty-codec-http2-4.1.137.Final.jar [3 HIGH, 2 MEDIUM]
		|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
	|-- smallrye-fault-tolerance-vertx-6.11.2.jar
		|-- smallrye-fault-tolerance-core-6.11.2.jar [1 HIGH]
|-- smallrye-mutiny-vertx-web-client-3.23.0.jar
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- smallrye-mutiny-vertx-core-3.23.0.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-dataformat-yaml-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- vertx-codegen-4.5.33.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- vertx-core-4.5.33.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- netty-codec-haproxy-4.1.137.Final.jar [1 HIGH]
		|-- netty-codec-http2-4.1.137.Final.jar [3 HIGH, 2 MEDIUM]
			|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
		|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
		|-- netty-handler-proxy-4.1.137.Final.jar
			|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
	|-- vertx-web-client-4.5.33.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- rex-model-1.2.4-SNAPSHOT.jar
	|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- pnc-api-3.5.2-jakarta.jar
	|-- jackson-databind-2.22.2.jar [2 HIGH]
rex-dto-1.2.4-SNAPSHOT.jar
|-- pnc-api-3.5.2-jakarta.jar
	|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
rex-model-1.2.4-SNAPSHOT.jar
|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- jackson-core-2.22.2.jar [2 HIGH]
|-- quarkus-infinispan-client-3.39.3.jar
	|-- quarkus-elytron-security-common-3.39.3.jar
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
	|-- quarkus-netty-3.39.3.jar
		|-- netty-codec-http2-4.1.137.Final.jar [3 HIGH, 2 MEDIUM]
			|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
		|-- netty-codec-http-4.1.137.Final.jar [2 HIGH, 3 MEDIUM]
	|-- protostream-processor-6.0.7.jar
		|-- protostream-6.0.7.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- infinispan-client-hotrod-16.0.14.jar
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
		|-- wildfly-elytron-sasl-gs2-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
	|-- wildfly-elytron-sasl-digest-2.9.2.Final.jar
		|-- wildfly-elytron-mechanism-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
		|-- wildfly-elytron-util-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
	|-- wildfly-elytron-sasl-plain-2.9.2.Final.jar
		|-- wildfly-elytron-credential-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
			|-- wildfly-elytron-keystore-2.9.2.Final.jar
				|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
	|-- wildfly-elytron-ssh-util-2.9.2.Final.jar
		|-- wildfly-elytron-x500-cert-2.9.2.Final.jar
			|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
			|-- wildfly-elytron-x500-cert-util-2.9.2.Final.jar
				|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
			|-- wildfly-elytron-x500-2.9.2.Final.jar
				|-- wildfly-elytron-asn1-2.9.2.Final.jar [1 MEDIUM]
|-- pnc-api-3.5.2-jakarta.jar
	|-- jackson-databind-2.22.2.jar [2 HIGH]


No Policy violations were detected

Project 'rex-pr' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=d863d6e3-d07b-4b67-b97e-8542321ab38e
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=753bbc0454fa4470bc51627ed20f856cc694ea8072cd41f08299e4eb981274ab

Mend AI scan succeeded.

Support Token: 27ffa208af0284f97970dde87bc032b3a1791672792267
SAST scan output 
*no findings*

Full logs and artifacts

View more details on GitHub Actions