[Snyk] Fix for 38 vulnerabilities

[lunixbr]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - webgoat-lessons/vulnerable-components/pom.xml #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Upgrade | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------|:-------------------------  | **454/1000**
**Why?** Has a fix available, CVSS 4.8 | Insufficient Hostname Verification
[SNYK-JAVA-CHQOSLOGBACK-1726923](https://snyk.io/vuln/SNYK-JAVA-CHQOSLOGBACK-1726923) | | No | No Known Exploit  | **751/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.6 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1040458](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1040458) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Arbitrary File Deletion
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1051966](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1051966) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **711/1000**
**Why?** Mature exploit, Has a fix available, CVSS 6.5 | Server-Side Request Forgery (SSRF)
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1051967](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1051967) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Mature  | **611/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.8 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088328](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088328) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088329](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088329) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088330](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088330) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **776/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 9.1 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088331](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088331) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **626/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.1 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088332](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088332) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088333](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088333) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **626/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.1 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088334](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088334) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088335](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088335) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **626/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.1 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088336](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088336) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088337](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088337) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088338](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088338) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **631/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.2 | Deserialization of Untrusted Data
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1294540](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1294540) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Arbitrary Code Execution
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569176](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569176) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Arbitrary Code Execution
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569177](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569177) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Arbitrary Code Execution
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569178](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569178) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Arbitrary Code Execution
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569179](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569179) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Arbitrary Code Execution
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569180](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569180) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Arbitrary Code Execution
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569181](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569181) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Arbitrary Code Execution
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569182](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569182) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Remote Code Execution (RCE)
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569183](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569183) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Arbitrary Code Execution
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569185](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569185) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Arbitrary Code Execution
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569186](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569186) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Arbitrary Code Execution
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569187](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569187) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **646/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.5 | Denial of Service (DoS)
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569189](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569189) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Server-Side Request Forgery (SSRF)
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569190](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569190) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **746/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.5 | Server-Side Request Forgery (SSRF)
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569191](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569191) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Proof of Concept  | **589/1000**
**Why?** Has a fix available, CVSS 7.5 | Denial of Service (DoS)
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-2388977](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-2388977) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | No Known Exploit  | **589/1000**
**Why?** Has a fix available, CVSS 7.5 | XML External Entity (XXE) Injection
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-30385](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-30385) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | No Known Exploit  | **589/1000**
**Why?** Has a fix available, CVSS 7.5 | Denial of Service (DoS)
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-31394](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-31394) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | No Known Exploit  | **626/1000**
**Why?** Mature exploit, Has a fix available, CVSS 4.8 | Insecure XML deserialization
[SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-460764](https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-460764) | `com.thoughtworks.xstream:xstream:`
`1.4.5 -> 1.4.19`
| No | Mature  | **579/1000**
**Why?** Has a fix available, CVSS 7.3 | Improper Input Validation
[SNYK-JAVA-ORGGLASSFISH-1297098](https://snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-1297098) | | No | No Known Exploit  | **429/1000**
**Why?** Has a fix available, CVSS 4.3 | Improper Output Neutralization for Logs
[SNYK-JAVA-ORGSPRINGFRAMEWORK-2329097](https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2329097) | | No | No Known Exploit  | **429/1000**
**Why?** Has a fix available, CVSS 4.3 | Improper Input Validation
[SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878](https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878) | | No | No Known Exploit  | **506/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 3.7 | Improper Handling of Case Sensitivity
[SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634](https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634) | | No | Proof of Concept (*) Note that the real score may have changed since the PR was raised. #### Vulnerabilities that could not be fixed - Upgrade: - Could not upgrade `org.springframework.boot:spring-boot-starter-validation@2.4.3` to `org.springframework.boot:spring-boot-starter-validation@2.5.13`; Reason `could not apply upgrade, dependency is managed externally` ; Location: `https://maven-central.storage-download.googleapis.com/maven2/org/springframework/boot/spring-boot-dependencies/2.4.3/spring-boot-dependencies-2.4.3.pom` Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/lunixbr/project/bcf1b448-8ed4-45f1-bb11-2aded42fa14b?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/lunixbr/project/bcf1b448-8ed4-45f1-bb11-2aded42fa14b?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"fcbb7ee2-6fb6-4acd-aad1-2a4b62acb948","prPublicId":"fcbb7ee2-6fb6-4acd-aad1-2a4b62acb948","dependencies":[{"name":"com.thoughtworks.xstream:xstream","from":"1.4.5","to":"1.4.19"},{"name":"org.springframework.boot:spring-boot-starter-validation","from":"2.4.3","to":"2.5.13"}],"packageManager":"maven","projectPublicId":"bcf1b448-8ed4-45f1-bb11-2aded42fa14b","projectUrl":"https://app.snyk.io/org/lunixbr/project/bcf1b448-8ed4-45f1-bb11-2aded42fa14b?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634","SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878","SNYK-JAVA-ORGSPRINGFRAMEWORK-2329097","SNYK-JAVA-ORGGLASSFISH-1297098","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-460764","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-31394","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-30385","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-2388977","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569191","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569190","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569189","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569187","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569186","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569185","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569183","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569182","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569181","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569180","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569179","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569178","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569177","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569176","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1294540","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088338","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088337","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088336","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088335","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088334","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088333","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088332","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088331","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088330","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088329","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088328","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1051967","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1051966","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1040458","SNYK-JAVA-CHQOSLOGBACK-1726923"],"upgrade":["SNYK-JAVA-CHQOSLOGBACK-1726923","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1040458","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1051966","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1051967","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088328","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088329","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088330","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088331","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088332","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088333","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088334","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088335","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088336","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088337","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088338","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1294540","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569176","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569177","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569178","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569179","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569180","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569181","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569182","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569183","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569185","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569186","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569187","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569189","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569190","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569191","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-2388977","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-30385","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-31394","SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-460764","SNYK-JAVA-ORGGLASSFISH-1297098","SNYK-JAVA-ORGSPRINGFRAMEWORK-2329097","SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878","SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634"],"isBreakingChange":false,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[506,429,429,579,626,589,589,589,746,746,646,746,746,746,746,746,746,746,746,746,746,746,631,586,696,626,586,626,586,626,776,586,586,611,711,586,751,454]}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Insecure XML deserialization](https://learn.snyk.io/lessons/spring4shell/java/?loc=fix-pr) 🦉 [Denial of Service (DoS)](https://learn.snyk.io/lessons/redos/javascript/?loc=fix-pr) 🦉 [Server-Side Request Forgery (SSRF)](https://learn.snyk.io/lessons/insecure-deserialization/java/?loc=fix-pr) 🦉 [More lessons are available in Snyk Learn](https://learn.snyk.io?loc=fix-pr)

[sonarcloud[bot]]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information