Échec pipeline audit n°501287

Problème rencontré

Le pipeline 501287 a échoué :

Name: nokogiri
Version: 1.13.3
CVE: CVE-2022-23437
GHSA: GHSA-xxx9-3xcr-gjj3
Criticality: Medium
URL: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xxx9-3xcr-gjj3
Title: XML Injection in Xerces Java affects Nokogiri
Solution: upgrade to >= 1.13.4
Name: nokogiri
Version: 1.13.3
CVE: CVE-2018-25032
GHSA: GHSA-v6gp-9mmm-c6p5
Criticality: High
URL: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5
Title: Out-of-bounds Write in zlib affects Nokogiri
Solution: upgrade to >= 1.13.4
Name: nokogiri
Version: 1.13.3
CVE: CVE-2022-24836
GHSA: GHSA-crjr-9rc5-ghw8
Criticality: High
URL: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-crjr-9rc5-ghw8
Title: Inefficient Regular Expression Complexity in Nokogiri
Solution: upgrade to >= 1.13.4
Name: nokogiri
Version: 1.13.3
CVE: CVE-2022-24839
GHSA: GHSA-gx8x-g87m-h5q6
Criticality: High
URL: https://github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv
Title: Denial of Service (DoS) in Nokogiri on JRuby
Solution: upgrade to >= 1.13.4
Vulnerabilities found!

Comment reproduire ?

1. Considérant le code de Filaé
2. Lorsque je lance make audit-api
3. Alors j'ai le message d'erreur ci-dessus

Comportement attendu

1. Considérant le code de Filaé
2. Lorsque je lance make audit-api
3. Alors je n'ai pas de message d'erreur