Closed snyk-bot closed 2 years ago
:white_check_mark: Build validation-manager VM master build 149 completed (commit https://github.com/javydreamercsw/validation-manager/commit/d88b40e525 by @snyk-bot)
:white_check_mark: Build validation-manager VM master build 149 completed (commit https://github.com/javydreamercsw/validation-manager/commit/d88b40e525 by @snyk-bot)
Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Has a fix available, CVSS 3.7
SNYK-JAVA-COMMONSCODEC-561518
Why? Has a fix available, CVSS 7.5
SNYK-JAVA-ORGAPACHEPDFBOX-1088011
org.apache.pdfbox:pdfbox-tools:
2.0.16 -> 2.0.24
Why? Has a fix available, CVSS 7.5
SNYK-JAVA-ORGAPACHEPDFBOX-1088012
org.apache.pdfbox:pdfbox-tools:
2.0.16 -> 2.0.24
Why? Has a fix available, CVSS 7.5
SNYK-JAVA-ORGAPACHEPDFBOX-1304912
org.apache.pdfbox:pdfbox-tools:
2.0.16 -> 2.0.24
Why? Has a fix available, CVSS 7.5
SNYK-JAVA-ORGAPACHEPDFBOX-1304913
org.apache.pdfbox:pdfbox-tools:
2.0.16 -> 2.0.24
Why? Has a fix available, CVSS 8.3
SNYK-JAVA-ORGAPACHEXMLBEANS-1060048
Why? Has a fix available, CVSS 7.5
SNYK-JAVA-ORGJSOUP-1567345
(*) Note that the real score may have changed since the PR was raised.
Vulnerabilities that could not be fixed
com.vaadin:vaadin-server@7.7.23
tocom.vaadin:vaadin-server@7.7.28
; Reasoncould not apply upgrade, dependency is managed externally
; Location:provenance does not contain location
org.apache.poi:poi@3.17
toorg.apache.poi:poi@4.1.1
; Reasoncould not apply upgrade, dependency is managed externally
; Location:https://maven-central.storage-download.googleapis.com/maven2/org/apache/poi/poi-ooxml/3.17/poi-ooxml-3.17.pom
org.apache.poi:poi-ooxml@3.17
toorg.apache.poi:poi-ooxml@4.1.1
; Reasoncould not apply upgrade, dependency is managed externally
; Location:provenance does not contain location
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic