VRanjan182424 (Community Member) asked a question.

Veracode SCA did not report CVE-2022-29217 for PyJWT (current version 1.7.1, expected version > 2.4.0) in Python project. This dependency is confirmed by "pip list --outdated" command as well.
Any idea why this was not reported in Veracode SCA run.

Veracode SCA did not report CVE-2022-29217 for PyJWT (current version 1.7.1, expected version > 2.4.0) in Python project. This dependency is confirmed by "pip list --outdated" command as well.

Any idea why this was not reported in Veracode SCA run.


  • Hi @VRanjan182424 (Community Member)​ ,

     

    I would recommend you contact our technical support team. Here's how you can log a case:

    1. Navigate to the upper right corner of any page in the Community, click on your user avatar.

    2. Select Contact Support from the drop-down menu.

     

    Thank you,

    Boy Baukema

    Expand Post

Topics (3)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.