Closed snyk-bot closed 2 years ago
:x: Build validation-manager VM master build 169 failed (commit https://github.com/javydreamercsw/validation-manager/commit/a10e31245f by @javydreamercsw)
:x: Build validation-manager VM master build 169 failed (commit https://github.com/javydreamercsw/validation-manager/commit/a10e31245f by @javydreamercsw)
Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Has a fix available, CVSS 7.7
SNYK-JAVA-COMGOOGLECODEGSON-1730327
org.jodconverter:jodconverter-local:
4.1.0 -> 4.2.3
Why? Has a fix available, CVSS 3.7
SNYK-JAVA-COMMONSCODEC-561518
Why? Mature exploit, Has a fix available, CVSS 5.3
SNYK-JAVA-COMMONSIO-1277109
org.jodconverter:jodconverter-local:
4.1.0 -> 4.2.3
Why? Has a fix available, CVSS 4.2
SNYK-JAVA-COMVAADIN-1069817
Why? Has a fix available, CVSS 4
SNYK-JAVA-COMVAADIN-1252747
Why? Has a fix available, CVSS 7.5
SNYK-JAVA-ORGJSOUP-1567345
(*) Note that the real score may have changed since the PR was raised.
Vulnerabilities that could not be fixed
com.vaadin:vaadin-client@7.7.23
tocom.vaadin:vaadin-client@8.12.3
; Reasoncould not apply upgrade, dependency is managed externally
; Location:provenance does not contain location
com.vaadin:vaadin-server@7.7.23
tocom.vaadin:vaadin-server@7.7.28
; Reasoncould not apply upgrade, dependency is managed externally
; Location:provenance does not contain location
org.apache.poi:poi-scratchpad@3.17
toorg.apache.poi:poi-scratchpad@4.1.1
; Reasoncould not apply upgrade, dependency is managed externally
; Location:provenance does not contain location
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic