Skip to content

Conversation

@YashSahsani
Copy link
Owner

snyk-top-banner

Snyk has created this PR to fix 13 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

  • pom.xml

Vulnerabilities that will be fixed with an upgrade:

Issue Score Upgrade
high severity Improper Cleanup on Thrown Exception
SNYK-JAVA-ORGAPACHETOMCATEMBED-9905132
  821   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade Mature
high severity Path Equivalence
SNYK-JAVA-ORGAPACHETOMCATEMBED-9396739
  814   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade Mature
high severity Relative Path Traversal
SNYK-JAVA-ORGAPACHETOMCATEMBED-13733966
  706   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade Proof of Concept
high severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGAPACHETOMCATEMBED-10365122
  649   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade No Known Exploit
high severity Integer Overflow or Wraparound
SNYK-JAVA-ORGAPACHETOMCATEMBED-10674391
  649   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade No Known Exploit
high severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGAPACHETOMCATEMBED-10676855
  649   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade No Known Exploit
high severity Improper Resource Shutdown or Release
SNYK-JAVA-ORGAPACHETOMCATEMBED-11799152
  649   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade No Known Exploit
medium severity Improper Neutralization
SNYK-JAVA-ORGAPACHETOMCATEMBED-9905136
  636   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade Proof of Concept
high severity Untrusted Search Path
SNYK-JAVA-ORGAPACHETOMCATEMBED-13746602
  589   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade No Known Exploit
medium severity Session Fixation
SNYK-JAVA-ORGAPACHETOMCATEMBED-11798986
  559   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade No Known Exploit
medium severity Improper Handling of Case Sensitivity
SNYK-JAVA-ORGAPACHETOMCATEMBED-10264469
  529   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade No Known Exploit
medium severity Authentication Bypass Using an Alternate Path or Channel
SNYK-JAVA-ORGAPACHETOMCATEMBED-10365310
  529   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade No Known Exploit
medium severity Improper Resource Shutdown or Release
SNYK-JAVA-ORGAPACHETOMCATEMBED-13723930
  514   org.springframework.boot:spring-boot-starter-web:
3.4.1 -> 4.0.0
Major version upgrade No Known Exploit

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling
🦉 Relative Path Traversal

@sonarqubecloud
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants