Detected CVE-2015-0886 in jBcrypt

[Jsalz2000]

Project board link

Hello, our twistlock scans picked up CVE-2015-0886 in org.mindrot_jbcrypt 0.3m for cassandra-reaper:3.6.1.
I searched the repo, but couldn't find this listed anywhere. Is it a dependency of a dependency? Is it currently being worked on?

Thank you!

┆Issue is synchronized with this Jira Story by Unito
┆Issue Number: REAP-192

[MouraFe]

Hey, there. 👋

This vulnerability is also present on release version 3.7.0.

Cheers!