SWI-3723 [Snyk] Fix for 4 vulnerabilities

[bwappsec]

Snyk has created this PR to fix 4 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• samples/server/petstore/springboot-spring-pageable-without-j8/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Deserialization of Untrusted Data SNYK-JAVA-COMGOOGLEGUAVA-32236	105	io.springfox:springfox-swagger2: 2.9.2 -> 2.10.0 No Path Found No Known Exploit
	Information Exposure SNYK-JAVA-COMFASTERXMLJACKSONCORE-10332631	55	No Path Found Proof of Concept
	Creation of Temporary File in Directory with Insecure Permissions SNYK-JAVA-COMGOOGLEGUAVA-5710356	49	io.springfox:springfox-swagger2: 2.9.2 -> 2.10.0 Reachable No Known Exploit
	Information Disclosure SNYK-JAVA-COMGOOGLEGUAVA-1015415	47	io.springfox:springfox-swagger2: 2.9.2 -> 2.10.0 No Path Found Proof of Concept

Vulnerabilities that could not be fixed

• Upgrade:
  • Could not upgrade com.fasterxml.jackson.core:jackson-databind@2.12.6.1 to com.fasterxml.jackson.core:jackson-databind@2.13.0; Reason could not apply upgrade, dependency is managed externally ; Location: https://maven-central.storage-download.googleapis.com/maven2/com/fasterxml/jackson/jackson-bom/2.12.6.20220326/jackson-bom-2.12.6.20220326.pom
• Could not upgrade com.fasterxml.jackson.dataformat:jackson-dataformat-yaml@2.12.6 to com.fasterxml.jackson.dataformat:jackson-dataformat-yaml@2.13.0; Reason could not apply upgrade, dependency is managed externally ; Location: https://maven-central.storage-download.googleapis.com/maven2/com/fasterxml/jackson/jackson-bom/2.12.6.20220326/jackson-bom-2.12.6.20220326.pom
• Could not upgrade com.fasterxml.jackson.datatype:jackson-datatype-jsr310@2.12.6 to com.fasterxml.jackson.datatype:jackson-datatype-jsr310@2.13.0; Reason could not apply upgrade, dependency is managed externally ; Location: https://maven-central.storage-download.googleapis.com/maven2/com/fasterxml/jackson/jackson-bom/2.12.6.20220326/jackson-bom-2.12.6.20220326.pom
• Could not upgrade org.springframework.boot:spring-boot-starter-web@2.5.14 to org.springframework.boot:spring-boot-starter-web@2.6.0; Reason could not apply upgrade, dependency is managed externally ; Location: https://maven-central.storage-download.googleapis.com/maven2/org/springframework/boot/spring-boot-dependencies/2.5.14/spring-boot-dependencies-2.5.14.pom
• Could not upgrade org.webjars:webjars-locator-core@0.46 to org.webjars:webjars-locator-core@0.50; Reason could not apply upgrade, dependency is managed externally ; Location: https://maven-central.storage-download.googleapis.com/maven2/org/springframework/boot/spring-boot-dependencies/2.5.14/spring-boot-dependencies-2.5.14.pom

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Information Exposure
🦉 Creation of Temporary File in Directory with Insecure Permissions

[bwappsec]

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

✅ license/snyk check is complete. No issues have been found. (View Details)

✅ code/snyk check is complete. No issues have been found. (View Details)