How does the Conductor OSS team handle CVE identification and remediation?

[atuldhiman]

Hi team,

I’m interested in understanding the security practices followed in this repository.

1. How does the Conductor OSS team identify vulnerabilities such as CVEs?

2. Are there any specific tools or automated scanners used as part of this process?

3. What is the standard procedure followed when a CVE is discovered in this project?

The spring boot version used is v3.3.5 and there are 2 CVEs associated with it.
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot/3.3.5

Appreciate any insights you can share. Thank you!

[v1r3n]

Hi @atuldhiman we monitor CVEs and address them regularly.