ReachabilityOrg / Reachability4

Apache License 2.0
0 stars 0 forks source link

Update dependency org.apache.struts:struts2-core to v6 - autoclosed #36

Closed dev-mend-for-github-com[bot] closed 5 months ago

dev-mend-for-github-com[bot] commented 5 months ago

This PR contains the following updates:

Package Type Update Change
org.apache.struts:struts2-core (source) compile major 2.3.31 -> 6.1.2

By merging this PR, the issue #8 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
Critical Critical 10.0 CVE-2017-5638

Reachable

Critical Critical 9.8 CVE-2017-12611

Reachable

Critical Critical 9.8 CVE-2019-0230

Unreachable

Critical Critical 9.8 CVE-2020-17530

Unreachable

High High 8.1 CVE-2018-11776

Unreachable

High High 7.5 CVE-2017-9787

Reachable

High High 7.5 CVE-2017-9804
High High 7.5 CVE-2019-0233

Unreachable

By merging this PR, the issue #8 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
Critical Critical 9.8 CVE-2016-1000031

Unreachable

High High 7.5 CVE-2016-3092

Unreachable

High High 7.5 WS-2014-0034

Unreachable

High High 7.3 CVE-2014-0050

Unreachable

Medium Medium 4.0 CVE-2013-0248

Unreachable

By merging this PR, the issue #8 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
High High 7.5 CVE-2017-9787

Reachable

High High 7.5 CVE-2017-9804

By merging this PR, the issue #8 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
Medium Medium 4.8 CVE-2021-29425

Reachable