jhannes / logevents

An easy-to-extend implementation of SLF4J with batteries included and sensible defaults
Other
42 stars 8 forks source link

[Snyk] Fix for 2 vulnerabilities #35

Closed snyk-bot closed 3 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity
high severity 635/1000
Why? Has a fix available, CVSS 8.2
XML External Entity (XXE) Injection
SNYK-JAVA-ORGPOSTGRESQL-571481
org.postgresql:postgresql:
42.2.5 -> 42.2.13
No No Known Exploit
medium severity 444/1000
Why? Has a fix available, CVSS 4.6
Insecure Defaults
SNYK-JAVA-ORGWEBJARS-575003
org.webjars:swagger-ui:
3.23.11 -> 3.26.1
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

coveralls commented 4 years ago

Coverage Status

Coverage decreased (-0.04%) to 91.512% when pulling 828c85144a7758c5f712620607176ebaff7e3799 on snyk-fix-1605b2f3f78a9004ebc486f72bf035d6 into 7a2e46a5f1f12a49148067a7dc0b60e48e68d206 on master.

codecov-commenter commented 4 years ago

Codecov Report

Merging #35 into master will increase coverage by 0.01%. The diff coverage is n/a.

Impacted file tree graph

@@             Coverage Diff              @@
##             master      #35      +/-   ##
============================================
+ Coverage     87.83%   87.85%   +0.01%     
  Complexity     1810     1810              
============================================
  Files           113      113              
  Lines          5081     5081              
  Branches        488      488              
============================================
+ Hits           4463     4464       +1     
  Misses          425      425              
+ Partials        193      192       -1     
Impacted Files Coverage Δ Complexity Δ
...in/java/org/logeventsdemo/servlets/DemoServer.java 82.35% <0.00%> (+1.96%) 11.00% <0.00%> (ø%)

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 7a2e46a...828c851. Read the comment docs.

jhannes commented 3 years ago

Fixed manually