LF CLM report identified a vulnerability in the flowing dependency:

group: org.hibernate

Artifact: hibernate-validator

this dependency was identified in:

Dependency org.hibernate:hibernate-validator:jar:4.3.1.Final located at Module org.openecomp.sdc.onboarding:notifications-fe:war:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc.core.tools:openecomp-zusammen-tools:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc.onboarding:action-library-rest-services:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc.onboarding:action-library-rest-types:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc.onboarding:onboarding-be:war:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc.onboarding:validation-rest-services:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc.onboarding:validation-rest-types:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc.onboarding:vendor-license-rest-services:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc.onboarding:vendor-license-rest-types:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc.onboarding:vendor-software-products-rest-services:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc.onboarding:vendor-software-products-rest-types:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc.onboarding:vnf-repository-rest-services:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:application-config-rest-services:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:conflict-rest-services:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:conflict-rest-types:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:conflict-rest:pom:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:healthcheck-rest-services:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:item-permissions-rest-services:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:item-rest-services:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:item-rest-types:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:notifications-rest-services:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-conflict-api:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-conflict-core:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-action-api:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-action-core:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-action-manager:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-activity-log-api:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-activity-log-core:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-activity-log-manager:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-common-rest:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-conflict-manager:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-enrichment-api:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-enrichment-core:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-enrichment-impl:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-enrichment-lib:pom:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-healing-api:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-healing-core:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-healing-impl:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-item-permissions-manager:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-model-api:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-model-core:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-model-impl:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-model-lib:pom:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-tosca-generator-api:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-tosca-generator-core:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-validation-manager:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-vendor-license-api:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-vendor-license-core:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-vendor-license-manager:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-vendor-software-product-api:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-vendor-software-product-core:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-vendor-software-product-manager:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-versioning-api:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:openecomp-sdc-versioning-core:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:togglz-rest-services:jar:1.3.0-SNAPSHOT

Dependency org.hibernate:hibernate-validator:jar:5.3.3.Final located at Module org.openecomp.sdc:unique-type-rest-services:jar:1.3.0-SNAPSHOT

 

 

the closest version with a fix is 5.3.6.Final