[Snyk] Upgrade: com.nulab-inc:zxcvbn, jakarta.xml.bind:jakarta.xml.bind-api, com.sun.xml.bind:jaxb-impl, com.thoughtworks.xstream:xstream, commons-io:commons-io, io.jsonwebtoken:jjwt, jakarta.servlet:jakarta.servlet-api, org.apache.commons:commons-lang3, org.apache.commons:commons-text, org.asciidoctor:asciidoctorj, org.bitbucket.b_c:jose4j, org.flywaydb:flyway-core, org.hsqldb:hsqldb, org.jsoup:jsoup, org.projectlombok:lombok, org.springframework.boot:spring-boot-properties-migrator, org.springframework.boot:spring-boot-starter-actuator, org.springframework.boot:spring-boot-starter-data-jpa, org.springframework.boot:spring-boot-starter-oauth2-client, org.springframework.boot:spring-boot-starter-security, org.springframework.boot:spring-boot-starter-thymeleaf, org.springframework.boot:spring-boot-starter-undertow, org.springframework.boot:spring-boot-starter-validation, org.springframework.boot:spring-boot-starter-web, org.webjars:bootstrap, org.webjars:jquery, org.webjars:webjars-locator-core#25
Open
[Snyk] Upgrade: com.nulab-inc:zxcvbn, jakarta.xml.bind:jakarta.xml.bind-api, com.sun.xml.bind:jaxb-impl, com.thoughtworks.xstream:xstream, commons-io:commons-io, io.jsonwebtoken:jjwt, jakarta.servlet:jakarta.servlet-api, org.apache.commons:commons-lang3, org.apache.commons:commons-text, org.asciidoctor:asciidoctorj, org.bitbucket.b_c:jose4j, org.flywaydb:flyway-core, org.hsqldb:hsqldb, org.jsoup:jsoup, org.projectlombok:lombok, org.springframework.boot:spring-boot-properties-migrator, org.springframework.boot:spring-boot-starter-actuator, org.springframework.boot:spring-boot-starter-data-jpa, org.springframework.boot:spring-boot-starter-oauth2-client, org.springframework.boot:spring-boot-starter-security, org.springframework.boot:spring-boot-starter-thymeleaf, org.springframework.boot:spring-boot-starter-undertow, org.springframework.boot:spring-boot-starter-validation, org.springframework.boot:spring-boot-starter-web, org.webjars:bootstrap, org.webjars:jquery, org.webjars:webjars-locator-core#25
Conversation
Snyk has created this PR to upgrade:
- com.nulab-inc:zxcvbn from 1.8.0 to 1.9.0.
See this package in maven: https://mvnrepository.com/artifact/com.nulab-inc/zxcvbn/
- jakarta.xml.bind:jakarta.xml.bind-api from 4.0.1 to 4.0.2.
See this package in maven: https://mvnrepository.com/artifact/jakarta.xml.bind/jakarta.xml.bind-api/
- com.sun.xml.bind:jaxb-impl from 4.0.3 to 4.0.5.
See this package in maven: https://mvnrepository.com/artifact/com.sun.xml.bind/jaxb-impl/
- com.thoughtworks.xstream:xstream from 1.4.5 to 1.4.20.
See this package in maven: https://mvnrepository.com/artifact/com.thoughtworks.xstream/xstream/
- commons-io:commons-io from 2.15.1 to 2.16.1.
See this package in maven: https://mvnrepository.com/artifact/commons-io/commons-io/
- io.jsonwebtoken:jjwt from 0.9.1 to 0.12.6.
See this package in maven: https://mvnrepository.com/artifact/io.jsonwebtoken/jjwt/
- jakarta.servlet:jakarta.servlet-api from 6.0.0 to 6.1.0.
See this package in maven: https://mvnrepository.com/artifact/jakarta.servlet/jakarta.servlet-api/
- org.apache.commons:commons-lang3 from 3.12.0 to 3.16.0.
See this package in maven: https://mvnrepository.com/artifact/org.apache.commons/commons-lang3/
- org.apache.commons:commons-text from 1.10.0 to 1.12.0.
See this package in maven: https://mvnrepository.com/artifact/org.apache.commons/commons-text/
- org.asciidoctor:asciidoctorj from 2.5.10 to 2.5.13.
See this package in maven: https://mvnrepository.com/artifact/org.asciidoctor/asciidoctorj/
- org.bitbucket.b_c:jose4j from 0.9.3 to 0.9.6.
See this package in maven: https://mvnrepository.com/artifact/org.bitbucket.b_c/jose4j/
- org.flywaydb:flyway-core from 9.16.3 to 9.22.3.
See this package in maven: https://mvnrepository.com/artifact/org.flywaydb/flyway-core/
- org.hsqldb:hsqldb from 2.7.2 to 2.7.3.
See this package in maven: https://mvnrepository.com/artifact/org.hsqldb/hsqldb/
- org.jsoup:jsoup from 1.17.2 to 1.18.1.
See this package in maven: https://mvnrepository.com/artifact/org.jsoup/jsoup/
- org.projectlombok:lombok from 1.18.30 to 1.18.34.
See this package in maven: https://mvnrepository.com/artifact/org.projectlombok/lombok/
- org.springframework.boot:spring-boot-properties-migrator from 3.1.5 to 3.3.2.
See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-properties-migrator/
- org.springframework.boot:spring-boot-starter-actuator from 3.1.5 to 3.3.2.
See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-actuator/
- org.springframework.boot:spring-boot-starter-data-jpa from 3.1.5 to 3.3.2.
See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-data-jpa/
- org.springframework.boot:spring-boot-starter-oauth2-client from 3.1.5 to 3.3.2.
See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-oauth2-client/
- org.springframework.boot:spring-boot-starter-security from 3.1.5 to 3.3.2.
See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-security/
- org.springframework.boot:spring-boot-starter-thymeleaf from 3.1.5 to 3.3.2.
See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-thymeleaf/
- org.springframework.boot:spring-boot-starter-undertow from 3.1.5 to 3.3.2.
See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-undertow/
- org.springframework.boot:spring-boot-starter-validation from 3.1.5 to 3.3.2.
See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-validation/
- org.springframework.boot:spring-boot-starter-web from 3.1.5 to 3.3.2.
See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-web/
- org.webjars:bootstrap from 5.3.2 to 5.3.3.
See this package in maven: https://mvnrepository.com/artifact/org.webjars/bootstrap/
- org.webjars:jquery from 3.7.0 to 3.7.1.
See this package in maven: https://mvnrepository.com/artifact/org.webjars/jquery/
- org.webjars:webjars-locator-core from 0.53 to 0.59.
See this package in maven: https://mvnrepository.com/artifact/org.webjars/webjars-locator-core/
See this project in Snyk:
https://app.snyk.io/org/intrapus/project/58f96adb-afa5-4e57-b092-aff17f79f4b6?utm_source=github&utm_medium=referral&page=upgrade-pr
Micro-Learning Topic: Denial of service (Detected by phrase)Matched on "Denial of Service"The Denial of Service (DoS) attack is focused on making a resource (site, application, server) unavailable for the purpose it was designed. There are many ways to make a service unavailable for legitimate users by manipulating network packets, programming, logical, or resources handling vulnerabilities, among others. Source: https://www.owasp.org/index.php/Denial_of_Service Try a challenge in Secure Code WarriorMicro-Learning Topic: Deserialization of untrusted data (Detected by phrase)Matched on "Deserialization of Untrusted Data"It is often convenient to serialize objects for communication or to save them for later use. However, serialized data or code can be modified. This malformed data or unexpected data could be used to abuse application logic, deny service, or execute arbitrary code when deserialized. This is usually done with "gadget chains Try a challenge in Secure Code WarriorHelpful references
Micro-Learning Topic: Server-side request forgery (Detected by phrase)Matched on "Server-Side Request Forgery"Server-Side Request Forgery (SSRF) vulnerabilities are caused when an attacker can supply or modify a URL that reads or sends data to the server. The attacker can create a malicious request with a manipulated URL, when this request reaches the server, the server-side code executes the exploit URL causing the attacker to be able to read data from services that shouldn't be exposed. Try a challenge in Secure Code WarriorMicro-Learning Topic: External entity injection (Detected by phrase)Matched on "XXE"An XML External Entity attack is a type of attack against an application that parses XML input. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service, server-side request forgery, port scanning from the perspective of the machine where the parser is located, and other system impacts. Try a challenge in Secure Code WarriorHelpful references
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
com.nulab-inc:zxcvbn
from 1.8.0 to 1.9.0 | 3 versions ahead of your current version | 5 months ago
on 2024-04-06
jakarta.xml.bind:jakarta.xml.bind-api
from 4.0.1 to 4.0.2 | 1 version ahead of your current version | 7 months ago
on 2024-02-19
com.sun.xml.bind:jaxb-impl
from 4.0.3 to 4.0.5 | 2 versions ahead of your current version | 6 months ago
on 2024-03-06
com.thoughtworks.xstream:xstream
from 1.4.5 to 1.4.20 | 22 versions ahead of your current version | 2 years ago
on 2022-12-23
commons-io:commons-io
from 2.15.1 to 2.16.1 | 2 versions ahead of your current version | 5 months ago
on 2024-04-05
io.jsonwebtoken:jjwt
from 0.9.1 to 0.12.6 | 7 versions ahead of your current version | 3 months ago
on 2024-06-21
jakarta.servlet:jakarta.servlet-api
from 6.0.0 to 6.1.0 | 3 versions ahead of your current version | 4 months ago
on 2024-05-24
org.apache.commons:commons-lang3
from 3.12.0 to 3.16.0 | 4 versions ahead of your current version | a month ago
on 2024-08-01
org.apache.commons:commons-text
from 1.10.0 to 1.12.0 | 2 versions ahead of your current version | 5 months ago
on 2024-04-13
org.asciidoctor:asciidoctorj
from 2.5.10 to 2.5.13 | 18 versions ahead of your current version | 4 months ago
on 2024-05-19
org.bitbucket.b_c:jose4j
from 0.9.3 to 0.9.6 | 3 versions ahead of your current version | 6 months ago
on 2024-03-06
org.flywaydb:flyway-core
from 9.16.3 to 9.22.3 | 16 versions ahead of your current version | a year ago
on 2023-10-12
org.hsqldb:hsqldb
from 2.7.2 to 2.7.3 | 1 version ahead of your current version | 3 months ago
on 2024-05-31
org.jsoup:jsoup
from 1.17.2 to 1.18.1 | 1 version ahead of your current version | 2 months ago
on 2024-07-10
org.projectlombok:lombok
from 1.18.30 to 1.18.34 | 2 versions ahead of your current version | 2 months ago
on 2024-06-28
org.springframework.boot:spring-boot-properties-migrator
from 3.1.5 to 3.3.2 | 19 versions ahead of your current version | 2 months ago
on 2024-07-18
org.springframework.boot:spring-boot-starter-actuator
from 3.1.5 to 3.3.2 | 20 versions ahead of your current version | 2 months ago
on 2024-07-18
org.springframework.boot:spring-boot-starter-data-jpa
from 3.1.5 to 3.3.2 | 19 versions ahead of your current version | 2 months ago
on 2024-07-18
org.springframework.boot:spring-boot-starter-oauth2-client
from 3.1.5 to 3.3.2 | 19 versions ahead of your current version | 2 months ago
on 2024-07-18
org.springframework.boot:spring-boot-starter-security
from 3.1.5 to 3.3.2 | 19 versions ahead of your current version | 2 months ago
on 2024-07-18
org.springframework.boot:spring-boot-starter-thymeleaf
from 3.1.5 to 3.3.2 | 19 versions ahead of your current version | 2 months ago
on 2024-07-18
org.springframework.boot:spring-boot-starter-undertow
from 3.1.5 to 3.3.2 | 20 versions ahead of your current version | 2 months ago
on 2024-07-18
org.springframework.boot:spring-boot-starter-validation
from 3.1.5 to 3.3.2 | 20 versions ahead of your current version | 2 months ago
on 2024-07-18
org.springframework.boot:spring-boot-starter-web
from 3.1.5 to 3.3.2 | 19 versions ahead of your current version | 2 months ago
on 2024-07-18
org.webjars:bootstrap
from 5.3.2 to 5.3.3 | 1 version ahead of your current version | 7 months ago
on 2024-02-25
org.webjars:jquery
from 3.7.0 to 3.7.1 | 1 version ahead of your current version | a year ago
on 2023-08-29
org.webjars:webjars-locator-core
from 0.53 to 0.59 | 6 versions ahead of your current version | 3 months ago
on 2024-06-08
Issues fixed by the recommended upgrade:
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569176
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569177
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088337
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569178
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569179
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569180
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569181
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569182
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569183
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569185
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569186
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1040458
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569187
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569190
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569191
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-2388977
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-30385
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-31394
SNYK-JAVA-ORGBITBUCKETBC-6139942
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088330
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088331
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088332
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088333
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088334
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088335
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088336
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088338
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1294540
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1051966
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1051967
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088328
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088329
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569189
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-3091180
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-3182897
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-460764
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: