hazelcast / quarkus-hazelcast-client

Quarkus Hazelcast Client Extension
44 stars 10 forks source link

[Snyk] Upgrade com.hazelcast:hazelcast from 5.2.4 to 5.5.0 #410

Open promanenko opened 3 months ago

promanenko commented 3 months ago

snyk-top-banner

Snyk has created this PR to upgrade com.hazelcast:hazelcast from 5.2.4 to 5.5.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Improper Authorization
SNYK-JAVA-COMHAZELCAST-6282853
539 No Known Exploit
medium severity Insufficiently Protected Credentials
SNYK-JAVA-COMHAZELCAST-5591146
539 No Known Exploit
medium severity Improper Access Control
SNYK-JAVA-COMHAZELCAST-6249443
539 No Known Exploit

[!IMPORTANT]

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

devOpsHazelcast commented 3 months ago

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.