search

javydreamercsw / validation-manager

Validation Manager is a tool to handle all the cumbersome paperwork of regulated environment validations. Including Validation Plans, protocols, executions and exceptions. Keeping everything in one place and best of all paperless.
https://sourceforge.net/projects/validationmgr/
Apache License 2.0
2 stars 3 forks source link

[Snyk] Fix for 7 vulnerabilities #130

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity
low severity 399/1000
Why? Has a fix available, CVSS 3.7		 Information Exposure
SNYK-JAVA-COMMONSCODEC-561518		 Yes No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Denial of Service (DoS)
SNYK-JAVA-ORGAPACHEPDFBOX-1088011		 org.apache.pdfbox:pdfbox-tools:
2.0.16 -> 2.0.24
No No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Denial of Service (DoS)
SNYK-JAVA-ORGAPACHEPDFBOX-1088012		 org.apache.pdfbox:pdfbox-tools:
2.0.16 -> 2.0.24
No No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Denial of Service (DoS)
SNYK-JAVA-ORGAPACHEPDFBOX-1304912		 org.apache.pdfbox:pdfbox-tools:
2.0.16 -> 2.0.24
No No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Denial of Service (DoS)
SNYK-JAVA-ORGAPACHEPDFBOX-1304913		 org.apache.pdfbox:pdfbox-tools:
2.0.16 -> 2.0.24
No No Known Exploit
high severity 629/1000
Why? Has a fix available, CVSS 8.3		 XML External Entity (XXE) Injection
SNYK-JAVA-ORGAPACHEXMLBEANS-1060048		 Yes No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Denial of Service (DoS)
SNYK-JAVA-ORGJSOUP-1567345		 No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Vulnerabilities that could not be fixed

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

AppVeyorBot commented 2 years ago

:white_check_mark: Build validation-manager VM master build 149 completed (commit https://github.com/javydreamercsw/validation-manager/commit/d88b40e525 by @snyk-bot)

AppVeyorBot commented 2 years ago

:white_check_mark: Build validation-manager VM master build 149 completed (commit https://github.com/javydreamercsw/validation-manager/commit/d88b40e525 by @snyk-bot)