search

javydreamercsw / validation-manager

Validation Manager is a tool to handle all the cumbersome paperwork of regulated environment validations. Including Validation Plans, protocols, executions and exceptions. Keeping everything in one place and best of all paperless.
https://sourceforge.net/projects/validationmgr/
Apache License 2.0
2 stars 3 forks source link

[Snyk] Fix for 6 vulnerabilities #129

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity
high severity 599/1000
Why? Has a fix available, CVSS 7.7		 Deserialization of Untrusted Data
SNYK-JAVA-COMGOOGLECODEGSON-1730327		 org.jodconverter:jodconverter-local:
4.1.0 -> 4.2.3
No No Known Exploit
low severity 399/1000
Why? Has a fix available, CVSS 3.7		 Information Exposure
SNYK-JAVA-COMMONSCODEC-561518		 Yes No Known Exploit
medium severity 651/1000
Why? Mature exploit, Has a fix available, CVSS 5.3		 Directory Traversal
SNYK-JAVA-COMMONSIO-1277109		 org.jodconverter:jodconverter-local:
4.1.0 -> 4.2.3
No Mature
medium severity 424/1000
Why? Has a fix available, CVSS 4.2		 Timing Attack
SNYK-JAVA-COMVAADIN-1069817		 Yes No Known Exploit
medium severity 414/1000
Why? Has a fix available, CVSS 4		 Timing Attack
SNYK-JAVA-COMVAADIN-1252747		 No No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Denial of Service (DoS)
SNYK-JAVA-ORGJSOUP-1567345		 No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Vulnerabilities that could not be fixed

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

AppVeyorBot commented 2 years ago

:x: Build validation-manager VM master build 146 failed (commit https://github.com/javydreamercsw/validation-manager/commit/3d4a1c9c24 by @snyk-bot)

AppVeyorBot commented 2 years ago

:x: Build validation-manager VM master build 146 failed (commit https://github.com/javydreamercsw/validation-manager/commit/3d4a1c9c24 by @snyk-bot)

AppVeyorBot commented 2 years ago

:x: Build validation-manager VM master build 169 failed (commit https://github.com/javydreamercsw/validation-manager/commit/a10e31245f by @javydreamercsw)

AppVeyorBot commented 2 years ago

:x: Build validation-manager VM master build 169 failed (commit https://github.com/javydreamercsw/validation-manager/commit/a10e31245f by @javydreamercsw)