Saltar al contenido
QuenchWorks

VEXmetabase

metabase

1 declaración, emitidas el .Cada una es un hallazgo del escáner que no es explotable en esta imagen, y el motivo.

ImagenOpenVEX JSON

@id https://quench-works.com/vex/metabase/2026-09-28

  1. CVE-2025-59250

    no afectado · código vulnerable ausente
    • mssql-jdbc 13.2.1

    PROVEN false positive: 13.2.1 is the fixed release. GHSA for CVE-2025-59250 lists the 13.2 range as '>= 13.2.0.jre11, < 13.2.1.jre11', first patched 13.2.1.jre11. The .jre11 suffix is the JRE build flavour, not a version step, and Metabase's jar records the artifact as version=13.2.1 in META-INF/maven/com.microsoft.sqlserver/mssql-jdbc/pom.properties. Trivy then compares 13.2.1 against 13.2.1.jre11 and finds it lower. Scoped to 13.2.1; any other mssql-jdbc version must be re-checked.