From 01b6a04c391d27c4bda5c999d7b21d4bcaa37daa Mon Sep 17 00:00:00 2001 From: Tobias Stadler <28538704+devtobi@users.noreply.github.com> Date: Mon, 10 Aug 2026 17:53:36 +0200 Subject: [PATCH 1/3] Update dependency-review.yml --- .github/workflows/dependency-review.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 15a7ec0..98fa811 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -11,4 +11,4 @@ jobs: contents: read pull-requests: write steps: - - uses: it-at-m/lhm_actions/action-templates/actions/action-dependency-review@94f7e40aa557a2790abfa98a9cc9186d260b94f8 # v1.0.27 + - uses: it-at-m/lhm_actions/action-templates/actions/action-dependency-review@bug/356-prs-blocked-because-of-cves-being-reported-by-dependency-review-action From 73462b774bfe885c9f1a5d2c0b1b757eeaee48ab Mon Sep 17 00:00:00 2001 From: Tobias Stadler <28538704+devtobi@users.noreply.github.com> Date: Mon, 10 Aug 2026 17:58:44 +0200 Subject: [PATCH 2/3] Added affected dependency for testing --- backend/pom.xml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/backend/pom.xml b/backend/pom.xml index 57a56b7..fd8d57a 100644 --- a/backend/pom.xml +++ b/backend/pom.xml @@ -86,6 +86,13 @@ + + + net.sf.jasperreports + jasperreports + 6.21.4 + + org.springframework.boot From 182187ccfae4ce747d36214a6536b681c36704e3 Mon Sep 17 00:00:00 2001 From: Tobias Stadler <28538704+devtobi@users.noreply.github.com> Date: Mon, 10 Aug 2026 18:01:07 +0200 Subject: [PATCH 3/3] Update .trivyignore --- .trivyignore | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.trivyignore b/.trivyignore index e69de29..b6ed943 100644 --- a/.trivyignore +++ b/.trivyignore @@ -0,0 +1,2 @@ +CVE-2025-10492 +CVE-2026-6009