https://jenkins.onap.org/job/logging-analytics-maven-clm-master/36/console
https://jenkins.onap.org/view/logging-analytics/job/logging-analytics-maven-clm-master/

Don't post CVE titles or text - proprietary
see fix for guava to start in integration INT-619

tomcat embed core 8527 use 8533
Overriding managed version 1.2.3 for logback-classic pom.xml /logging-demo line 266 Maven pom Loading Problem
Overriding managed version 2.9.6 for jackson-core pom.xml /logging-demo line 148 Maven pom Loading Problem
Overriding managed version 5.0.9.RELEASE for spring-core pom.xml /logging-demo line 215 Maven pom Loading Problem
Overriding managed version 5.0.9.RELEASE for spring-web pom.xml /logging-demo line 251 Maven pom Loading Problem
Overriding managed version 5.0.9.RELEASE for spring-webmvc pom.xml /logging-demo line 256 Maven pom Loading Problem
The import org.junit.Assert is never used ApplicationServiceTest.java /logging-demo/src/test/java/org/onap/logging/demo line 23 Java Problem

Yes, I have jackson, eclipselink and spring - red, orange in policy - but in the security tab - I understand the orange is not required - it is level 5 (doing 9 and 7 levels first) - https://nexus-iq.wl.linuxfoundation.org/assets/index.html#/reports/logging-analytics/5b256c9721e8448bb4015229d4b5548f

ref: as "Critical" (Level 7 to 10) and "Severe" (Level 4 to 6).

page you can't see

https://wiki.onap.org/pages/viewpage.action?pageId=43385152