fix this vulnerability - #636
Open
RafMo20D wants to merge 111 commits into
Open
Conversation
sonarcloud Test
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917
…4cd22eb9 [Snyk] Security upgrade io.swagger.parser.v3:swagger-parser from 2.0.12 to 2.0.15
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664
…58804bb8 [Snyk] Security upgrade io.swagger.parser.v3:swagger-parser from 2.0.15 to 2.0.16
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2329097
…8ad1ab1a [Snyk] Security upgrade org.springframework:spring-web from 5.2.6.RELEASE to 5.2.18.RELEASE
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMMONSIO-1277109 - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-1048058 - https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878
…de3b8486 [Snyk] Fix for 3 vulnerabilities
Snyk has created this PR to upgrade org.junit.jupiter:junit-jupiter from 5.5.2 to 5.8.2. See this package in Maven Repository: https://mvnrepository.com/artifact/org.junit.jupiter/junit-jupiter/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/83c4dbac-9bd2-4651-a7ad-6a6a19615ab1?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade de.siegmar:logback-gelf from 2.0.0 to 2.2.0. See this package in Maven Repository: https://mvnrepository.com/artifact/de.siegmar/logback-gelf/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/b5826356-7565-496a-96a4-fe6dfeb2115a?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade org.iban4j:iban4j from 3.2.1 to 3.2.3-RELEASE. See this package in Maven Repository: https://mvnrepository.com/artifact/org.iban4j/iban4j/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/5b2bd134-405b-46f2-8ac4-7194cc34ba08?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade org.mapstruct:mapstruct from 1.4.1.Final to 1.4.2.Final. See this package in Maven Repository: https://mvnrepository.com/artifact/org.mapstruct/mapstruct/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/318d0716-6ec1-4033-9d8e-6c62cbcc62bf?utm_source=github&utm_medium=referral&page=upgrade-pr
…3.16 Snyk has created this PR to upgrade org.springframework:spring-web from 5.2.19.RELEASE to 5.3.16. See this package in Maven Repository: https://mvnrepository.com/artifact/org.springframework/spring-web/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/9e46a052-ff23-40e3-88ba-02e6c8fdc048?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade org.antlr:antlr4-runtime from 4.7.2 to 4.9.3. See this package in Maven Repository: https://mvnrepository.com/artifact/org.antlr/antlr4-runtime/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/9e46a052-ff23-40e3-88ba-02e6c8fdc048?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade org.jgrapht:jgrapht-core from 1.3.0 to 1.5.1. See this package in Maven Repository: https://mvnrepository.com/artifact/org.jgrapht/jgrapht-core/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/9e46a052-ff23-40e3-88ba-02e6c8fdc048?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade org.webjars:swagger-ui from 3.25.0 to 3.52.5. See this package in Maven Repository: https://mvnrepository.com/artifact/org.webjars/swagger-ui/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/71d77661-51d6-4058-aee1-a60240706f07?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade com.squareup:javapoet from 1.11.1 to 1.13.0. See this package in Maven Repository: https://mvnrepository.com/artifact/com.squareup/javapoet/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/9e46a052-ff23-40e3-88ba-02e6c8fdc048?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade org.webjars:webjars-locator from 0.38 to 0.45. See this package in Maven Repository: https://mvnrepository.com/artifact/org.webjars/webjars-locator/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/71d77661-51d6-4058-aee1-a60240706f07?utm_source=github&utm_medium=referral&page=upgrade-pr
…c40d617901feb [Snyk] Upgrade org.webjars:webjars-locator from 0.38 to 0.45
…4cabec9b2e44e [Snyk] Upgrade com.squareup:javapoet from 1.11.1 to 1.13.0
…2241db7c89efe [Snyk] Upgrade org.webjars:swagger-ui from 3.25.0 to 3.52.5
…962d1b47250c5 [Snyk] Upgrade org.jgrapht:jgrapht-core from 1.3.0 to 1.5.1
…394e940eecb9d [Snyk] Upgrade org.antlr:antlr4-runtime from 4.7.2 to 4.9.3
…cb28e606ca6ae [Snyk] Upgrade org.mapstruct:mapstruct from 1.4.1.Final to 1.4.2.Final
…1c3e21ba0d5c [Snyk] Upgrade org.springframework:spring-web from 5.2.19.RELEASE to 5.3.16
…d034b2655b2f [Snyk] Upgrade org.iban4j:iban4j from 3.2.1 to 3.2.3-RELEASE
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426 - https://snyk.io/vuln/SNYK-JAVA-ORGYAML-3016888 - https://snyk.io/vuln/SNYK-JAVA-ORGYAML-3113851
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-3326457
…c86365a4d [Snyk] Security upgrade commons-fileupload:commons-fileupload from 1.4 to 1.5
…e2b492e41 [Snyk] Security upgrade io.swagger.parser.v3:swagger-parser from 2.1.2 to 2.1.9
…331bd1c7b5b22 [Snyk] Upgrade org.mapstruct:mapstruct from 1.5.2.Final to 1.5.3.Final
…c6aea985d4de6 [Snyk] Upgrade org.junit.jupiter:junit-jupiter from 5.9.0 to 5.9.1
…701f72b575ec6 [Snyk] Upgrade org.antlr:antlr4-runtime from 4.10.1 to 4.11.0
Snyk has created this PR to upgrade org.junit.jupiter:junit-jupiter from 5.9.1 to 5.9.2. See this package in Maven Repository: https://mvnrepository.com/artifact/org.junit.jupiter/junit-jupiter/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/83c4dbac-9bd2-4651-a7ad-6a6a19615ab1?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade org.springframework:spring-web from 5.3.23 to 5.3.25. See this package in Maven Repository: https://mvnrepository.com/artifact/org.springframework/spring-web/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/9e46a052-ff23-40e3-88ba-02e6c8fdc048?utm_source=github&utm_medium=referral&page=upgrade-pr
…7d6fe41a564ee [Snyk] Upgrade org.junit.jupiter:junit-jupiter from 5.9.1 to 5.9.2
Snyk has created this PR to upgrade org.iban4j:iban4j from 3.2.3-RELEASE to 3.2.4-RELEASE. See this package in Maven Repository: https://mvnrepository.com/artifact/org.iban4j/iban4j/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/5b2bd134-405b-46f2-8ac4-7194cc34ba08?utm_source=github&utm_medium=referral&page=upgrade-pr
…79b5dd0b070f2 [Snyk] Upgrade org.iban4j:iban4j from 3.2.3-RELEASE to 3.2.4-RELEASE
Snyk has created this PR to upgrade org.antlr:antlr4-runtime from 4.11.0 to 4.11.1. See this package in Maven Repository: https://mvnrepository.com/artifact/org.antlr/antlr4-runtime/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/9e46a052-ff23-40e3-88ba-02e6c8fdc048?utm_source=github&utm_medium=referral&page=upgrade-pr
…bed01734d3e12 [Snyk] Upgrade org.antlr:antlr4-runtime from 4.11.0 to 4.11.1
…e9e0328092159 [Snyk] Upgrade org.springframework:spring-web from 5.3.23 to 5.3.25
Snyk has created this PR to upgrade org.antlr:antlr4-runtime from 4.11.1 to 4.12.0. See this package in Maven Repository: https://mvnrepository.com/artifact/org.antlr/antlr4-runtime/ See this project in Snyk: https://app.snyk.io/org/rafmo20d/project/9e46a052-ff23-40e3-88ba-02e6c8fdc048?utm_source=github&utm_medium=referral&page=upgrade-pr
…4d282b27119cb [Snyk] Upgrade org.antlr:antlr4-runtime from 4.11.1 to 4.12.0
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-NETMINIDEV-3369748
…397d7eb7b [Snyk] Security upgrade com.nimbusds:nimbus-jose-jwt from 8.23 to 9.0
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426
…f7be03540 [Snyk] Security upgrade org.webjars:webjars-locator from 0.45 to 0.47
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-5710356 - https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-3326457 - https://snyk.io/vuln/SNYK-JAVA-NETMINIDEV-3369748 - https://snyk.io/vuln/SNYK-JAVA-ORGECLIPSEJETTY-5426159 - https://snyk.io/vuln/SNYK-JAVA-ORGECLIPSEJETTY-5426160 - https://snyk.io/vuln/SNYK-JAVA-ORGECLIPSEJETTY-5426161
…195686de4 [Snyk] Security upgrade com.github.tomakehurst:wiremock-jre8 from 2.35.0 to 3.0.0
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-6056394
…63ba74465 [Snyk] Security upgrade org.webjars:swagger-ui from 3.52.5 to 4.1.3
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMNIMBUSDS-6247633
…ef4b1cb90 [Snyk] Security upgrade com.nimbusds:nimbus-jose-jwt from 9.0 to 9.37.2
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-5710356 - https://snyk.io/vuln/SNYK-JAVA-COMMONSCODEC-561518 - https://snyk.io/vuln/SNYK-JAVA-ORGMOZILLA-1314295
…649b3ef3c [Snyk] Security upgrade io.swagger.parser.v3:swagger-parser from 2.1.9 to 2.1.21
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.