Dependency check finds some vulnerabilities

[khauser]

Using id 'org.owasp.dependencycheck' version '9.0.9' in my build.gradle shows some issues regarding the sonarlint dependencies:

• sonar-ruby-plugin-1.15.0.4655.jar
• sonar-scala-plugin-1.15.0.4655.jar

But I guess these things need to be fixed on their side.

[remal]

This project automatically update dependencies using Renovate. So, I'd suggest trying to update to the latest version of the plugin.

If it doesn't help, we have two options:

1. It's an issue in these exact dependencies. In this case, it should be addressed on the Sonar's side
2. The issue is in a transitive dependency. In this case I could upgrade this transitive dependency, but I'd like to avoid it. Even in this case I'd recommend talking to Sonar authors

Summary:

1. Try to use the latest version of the plugin
2. If it doesn't help and the issue is with transitive dependencies, please report it

Thanks!