search

pragmatic-objects / oo-atom

A Java polyfill for better code design
MIT License
23 stars 2 forks source link

[Snyk] Security upgrade org.apache.maven:maven-plugin-api from 3.0 to 3.1.0 #294

Open snyk-bot opened 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Directory Traversal
SNYK-JAVA-ORGCODEHAUSPLEXUS-31521		 org.apache.maven:maven-plugin-api:
3.0 -> 3.1.0
No No Known Exploit
low severity 380/1000
Why? Has a fix available, CVSS 3.1		 XML External Entity (XXE) Injection
SNYK-JAVA-ORGCODEHAUSPLEXUS-461102		 org.apache.maven:maven-plugin-api:
3.0 -> 3.1.0
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

πŸ›  Adjust project settings

πŸ“š Read more about Snyk's upgrade and patch logic

codecov[bot] commented 4 years ago

Codecov Report

Merging #294 into master will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@            Coverage Diff            @@
##             master     #294   +/-   ##
=========================================
  Coverage     40.44%   40.44%           
  Complexity      189      189           
=========================================
  Files           179      179           
  Lines          1392     1392           
  Branches         40       40           
=========================================
  Hits            563      563           
  Misses          822      822           
  Partials          7        7

Continue to review full report at Codecov.

Legend - Click here to learn more Ξ” = absolute <relative> (impact), ΓΈ = not affected, ? = missing data Powered by Codecov. Last update 0658e0e...0303ee6. Read the comment docs.