search

hashgraph / hedera-protobufs-java

The protobuf message files defining the Hedera Hashgraph API
Apache License 2.0
37 stars 22 forks source link

[Snyk] Upgrade com.google.protobuf:protobuf-java from 3.16.1 to 3.25.4 #150

Open swirlds-automation opened 3 months ago

swirlds-automation commented 3 months ago

snyk-top-banner

Snyk has created this PR to upgrade com.google.protobuf:protobuf-java from 3.16.1 to 3.25.4.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Denial of Service (DoS)
SNYK-JAVA-COMGOOGLEPROTOBUF-3167772		 300 No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-COMGOOGLEPROTOBUF-3167774		 300 No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-COMGOOGLEPROTOBUF-3040284		 300 No Known Exploit

[!IMPORTANT]

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information: