Detections
Analytics

SCA: security update for com.intuit.karate:karate-core (GHSA-5x5q-8cgm-2hjq)

high Tenable Self-Hosted Container Security Plugin ID 411073

Description

Karate has vulnerable dependency on json-smart package (CVE-2023-1370)

Solution

Update the com.intuit.karate:karate-core library and its related packages to version 1.4.0 or later.

See Also

https://github.com/advisories/GHSA-5x5q-8cgm-2hjq

Plugin Details

Severity: High

ID: 411073

Version: Revision 1.4

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 8/19/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 3/31/2023

Vulnerability Publication Date: 3/31/2023

Reference Information

cwe: CWE-674