zeitgeist2018 / SpringBoot---Invoice-System

Simple invoice management system built with SpringBoot 2, Spring JPA, Spring Security and Thymeleaf
10 stars 12 forks source link

[Snyk] Fix for 135 vulnerabilities #4

Closed snyk-bot closed 1 year ago

snyk-bot commented 1 year ago

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity Reachability
medium severity 390/1000
Why? Has a fix available, CVSS 4.8
Insufficient Hostname Verification
SNYK-JAVA-CHQOSLOGBACK-1726923
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324
No No Known Exploit No Path Found
high severity 560/1000
Why? Has a fix available, CVSS 8.2
XML External Entity (XXE) Injection
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1048302
No No Known Exploit No Path Found
high severity 555/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449
No No Known Exploit No Path Found
high severity 555/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450
No No Known Exploit No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588
No Proof of Concept No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414
No No Known Exploit No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416
No Proof of Concept No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417
No No Known Exploit No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418
No Proof of Concept No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419
No No Known Exploit No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420
No Proof of Concept No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421
No Proof of Concept No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425
No No Known Exploit No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426
No Proof of Concept No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427
No Proof of Concept No Path Found
high severity /1000
Why?
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931
No No Known Exploit
high severity /1000
Why?
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736
No Proof of Concept
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244
No No Known Exploit No Path Found
medium severity 520/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424
No Proof of Concept No Path Found
medium severity 520/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426
No Proof of Concept No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207
No Proof of Concept No Path Found
high severity 705/1000
Why? Mature exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917
No Mature No Path Found
high severity 555/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617
No No Known Exploit No Path Found
high severity 555/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014
No No Known Exploit No Path Found
high severity 675/1000
Why? Mature exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015
No Mature No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016
No No Known Exploit No Path Found
high severity 555/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674
No No Known Exploit No Path Found
high severity 555/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676
No No Known Exploit No Path Found
high severity 555/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943
No No Known Exploit No Path Found
high severity 555/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980
No No Known Exploit No Path Found
high severity 555/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500
No No Known Exploit No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451
No Proof of Concept No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094
No Proof of Concept No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106
No Proof of Concept No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762
No Proof of Concept No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373
No No Known Exploit No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585
No Proof of Concept No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316
No No Known Exploit No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664
No Proof of Concept No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72445
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72447
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72450
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72451
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72882
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72883
No No Known Exploit No Path Found
high severity 563/1000
Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72884
No No Known Exploit No Path Found
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Improper Input Validation
SNYK-JAVA-COMFASTERXMLJACKSONDATATYPE-173759
No No Known Exploit No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Remote Code Execution (RCE)
SNYK-JAVA-COMH2DATABASE-2331071
Yes Proof of Concept No Path Found
critical severity 715/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 9.8
Remote Code Execution (RCE)
SNYK-JAVA-COMH2DATABASE-2348247
Yes Proof of Concept No Path Found
low severity 380/1000
Why? Mature exploit, Has a fix available, CVSS 2.2
Insecure Permissions
SNYK-JAVA-COMH2DATABASE-3009896
No Mature No Path Found
low severity 335/1000
Why? Has a fix available, CVSS 3.7
Information Exposure
SNYK-JAVA-COMMONSCODEC-561518
org.apache.poi:poi:
3.17 -> 4.1.1
Yes No Known Exploit No Path Found
medium severity 465/1000
Why? Has a fix available, CVSS 6.3
Privilege Escalation
SNYK-JAVA-MYSQL-174574
Yes No Known Exploit No Path Found
medium severity 520/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
XML External Entity (XXE) Injection
SNYK-JAVA-MYSQL-1766958
Yes Proof of Concept No Path Found
medium severity 480/1000
Why? Has a fix available, CVSS 6.6
Improper Authorization
SNYK-JAVA-MYSQL-2386864
Yes No Known Exploit No Path Found
high severity 590/1000
Why? Has a fix available, CVSS 8.8
Access Control Bypass
SNYK-JAVA-MYSQL-451464
Yes No Known Exploit No Path Found
medium severity 400/1000
Why? Has a fix available, CVSS 5
XML External Entity (XXE) Injection
SNYK-JAVA-ORGAPACHEPOI-548686
org.apache.poi:poi-ooxml:
3.17 -> 4.1.0
Yes No Known Exploit No Path Found
medium severity 430/1000
Why? Has a fix available, CVSS 5.6
HTTP Request Smuggling
SNYK-JAVA-ORGAPACHETOMCATEMBED-1017119
No No Known Exploit No Path Found
medium severity 490/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
Information Exposure
SNYK-JAVA-ORGAPACHETOMCATEMBED-1048292
No Proof of Concept No Path Found
medium severity 415/1000
Why? Has a fix available, CVSS 5.3
Information Disclosure
SNYK-JAVA-ORGAPACHETOMCATEMBED-1061939
No No Known Exploit No Path Found
high severity 500/1000
Why? Has a fix available, CVSS 7
Remote Code Execution (RCE)
SNYK-JAVA-ORGAPACHETOMCATEMBED-1080637
No No Known Exploit No Path Found
medium severity 445/1000
Why? Has a fix available, CVSS 5.9
HTTP Request Smuggling
SNYK-JAVA-ORGAPACHETOMCATEMBED-1080638
No No Known Exploit No Path Found
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHETOMCATEMBED-1728264
No No Known Exploit No Path Found
medium severity 390/1000
Why? Has a fix available, CVSS 4.8
Improper Input Validation
SNYK-JAVA-ORGAPACHETOMCATEMBED-1728265
No No Known Exploit No Path Found
medium severity 415/1000
Why? Has a fix available, CVSS 5.3
HTTP Request Smuggling
SNYK-JAVA-ORGAPACHETOMCATEMBED-1728266
No No Known Exploit No Path Found
high severity 600/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHETOMCATEMBED-1728268
No Proof of Concept No Path Found
low severity 335/1000
Why? Has a fix available, CVSS 3.7
Information Exposure
SNYK-JAVA-ORGAPACHETOMCATEMBED-3035793
No No Known Exploit No Path Found
low severity 335/1000
Why? Has a fix available, CVSS 3.7
HTTP Request Smuggling
SNYK-JAVA-ORGAPACHETOMCATEMBED-3097829
No No Known Exploit No Path Found
medium severity 475/1000
Why? Has a fix available, CVSS 6.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHETOMCATEMBED-3326459
No No Known Exploit No Path Found
medium severity 415/1000
Why? Has a fix available, CVSS 5.3
Unprotected Transport of Credentials
SNYK-JAVA-ORGAPACHETOMCATEMBED-3369687
No No Known Exploit No Path Found
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHETOMCATEMBED-451342
No No Known Exploit No Path Found
high severity 675/1000
Why? Mature exploit, Has a fix available, CVSS 8.1
Remote Code Execution
SNYK-JAVA-ORGAPACHETOMCATEMBED-451343
No Mature No Path Found
low severity 445/1000
Why? Mature exploit, Has a fix available, CVSS 3.5
Cross-site Scripting (XSS)
SNYK-JAVA-ORGAPACHETOMCATEMBED-451458
No Mature No Path Found
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHETOMCATEMBED-451459
No No Known Exploit No Path Found
medium severity 550/1000
Why? Mature exploit, Has a fix available, CVSS 5.6
Open Redirect
SNYK-JAVA-ORGAPACHETOMCATEMBED-451503
No Mature No Path Found
medium severity 445/1000
Why? Has a fix available, CVSS 5.9
Information Exposure
SNYK-JAVA-ORGAPACHETOMCATEMBED-451504
No No Known Exploit No Path Found
critical severity 640/1000
Why? Has a fix available, CVSS 9.8
Insecure Defaults
SNYK-JAVA-ORGAPACHETOMCATEMBED-451505
No No Known Exploit No Path Found
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHETOMCATEMBED-451508
No No Known Exploit No Path Found
low severity 305/1000
Why? Has a fix available, CVSS 3.1
Session Fixation
SNYK-JAVA-ORGAPACHETOMCATEMBED-538488
No No Known Exploit No Path Found
high severity 675/1000
Why? Mature exploit, Has a fix available, CVSS 8.1
Remote Code Execution (RCE)
SNYK-JAVA-ORGAPACHETOMCATEMBED-570072
No Mature No Path Found
medium severity 415/1000
Why? Has a fix available, CVSS 5.3
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHETOMCATEMBED-584427
No No Known Exploit No Path Found
high severity 565/1000
Why? Has a fix available, CVSS 8.3
XML External Entity (XXE) Injection
SNYK-JAVA-ORGAPACHEXMLBEANS-1060048
org.apache.poi:poi-ooxml:
3.17 -> 4.1.0
Yes No Known Exploit No Path Found
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Information Exposure
SNYK-JAVA-ORGBOUNCYCASTLE-1035561
com.github.librepdf:openpdf:
1.0.5 -> 1.1.0
No No Known Exploit No Path Found
medium severity 415/1000
Why? Has a fix available, CVSS 5.3
Timing Attack
SNYK-JAVA-ORGBOUNCYCASTLE-1296075
com.github.librepdf:openpdf:
1.0.5 -> 1.1.0
No No Known Exploit No Path Found
medium severity /1000
Why?
Cryptographic Issues
SNYK-JAVA-ORGBOUNCYCASTLE-2841508
com.github.librepdf:openpdf:
1.0.5 -> 1.1.0
No Proof of Concept
high severity /1000
Why?
Insecure Encryption
SNYK-JAVA-ORGBOUNCYCASTLE-32369
com.github.librepdf:openpdf:
1.0.5 -> 1.1.0
No No Known Exploit
critical severity /1000
Why?
Deserialization of Untrusted Data
SNYK-JAVA-ORGBOUNCYCASTLE-32412
com.github.librepdf:openpdf:
1.0.5 -> 1.1.0
No No Known Exploit
high severity /1000
Why?
SQL Injection
SNYK-JAVA-ORGHIBERNATE-1041788
No No Known Exploit
high severity /1000
Why?
SQL Injection
SNYK-JAVA-ORGHIBERNATE-584563
No No Known Exploit
medium severity /1000
Why?
Cross-site Scripting (XSS)
SNYK-JAVA-ORGHIBERNATEVALIDATOR-541187
No No Known Exploit
medium severity /1000
Why?
Improper Input Validation
SNYK-JAVA-ORGHIBERNATEVALIDATOR-568163
No No Known Exploit
high severity /1000
Why?
Improper Input Validation
SNYK-JAVA-ORGSPRINGFRAMEWORK-1009832
No No Known Exploit
medium severity /1000
Why?
Privilege Escalation
SNYK-JAVA-ORGSPRINGFRAMEWORK-1296829
No No Known Exploit
medium severity /1000
Why?
Improper Output Neutralization for Logs
SNYK-JAVA-ORGSPRINGFRAMEWORK-2329097
No No Known Exploit
medium severity /1000
Why?
Improper Input Validation
SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878
No No Known Exploit
medium severity /1000
Why?
Denial of Service (DoS)
SNYK-JAVA-ORGSPRINGFRAMEWORK-2434828
No No Known Exploit
critical severity /1000
Why?
Remote Code Execution
SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751
No Mature
low severity 410/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
Improper Handling of Case Sensitivity
SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634
No Proof of Concept No Path Found
medium severity 415/1000
Why? Has a fix available, CVSS 5.3
Denial of Service (DoS)
SNYK-JAVA-ORGSPRINGFRAMEWORK-2823313
No No Known Exploit No Path Found
high severity /1000
Why?
Access Restriction Bypass
SNYK-JAVA-ORGSPRINGFRAMEWORK-31651
No No Known Exploit
medium severity /1000
Why?
Information Exposure
SNYK-JAVA-ORGSPRINGFRAMEWORK-31689
No No Known Exploit
medium severity /1000
Why?
Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGSPRINGFRAMEWORK-3369749
No No Known Exploit
medium severity 445/1000
Why? Has a fix available, CVSS 5.9
Cross-Site Tracing (XST)
SNYK-JAVA-ORGSPRINGFRAMEWORK-451604
No No Known Exploit No Path Found
medium severity 445/1000
Why? Has a fix available, CVSS 5.9
Information Exposure
SNYK-JAVA-ORGSPRINGFRAMEWORK-467268
No No Known Exploit No Path Found
medium severity /1000
Why?
Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGSPRINGFRAMEWORK-5422217
No No Known Exploit
high severity /1000
Why?
Reflected File Download (RFD)
SNYK-JAVA-ORGSPRINGFRAMEWORK-559346
No Proof of Concept
low severity /1000
Why?
Denial of Service (DoS)
SNYK-JAVA-ORGSPRINGFRAMEWORK-72470
No No Known Exploit
high severity /1000
Why?
Insecure Temporary File
SNYK-JAVA-ORGSPRINGFRAMEWORKBOOT-2438287
No No Known Exploit
low severity /1000
Why?
Information Exposure
SNYK-JAVA-ORGSPRINGFRAMEWORKDATA-174140
No No Known Exploit
medium severity /1000
Why?
Information Exposure
SNYK-JAVA-ORGSPRINGFRAMEWORKDATA-451633
No No Known Exploit
medium severity /1000
Why?
Privilege Escalation
SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-1078232
No No Known Exploit
low severity /1000
Why?
Timing Attack
SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-1290497
No No Known Exploit
low severity /1000
Why?
Insecure Randomness
SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-174111
No No Known Exploit
high severity 635/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.2
Authorization Bypass
SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-2833359
No Proof of Concept No Path Found
medium severity /1000
Why?
Cryptographic Weakness
SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-570204
No No Known Exploit
high severity /1000
Why?
Remote Code Execution
SNYK-JAVA-ORGTHYMELEAF-1915389
No No Known Exploit
high severity /1000
Why?
Denial of Service (DoS)
SNYK-JAVA-ORGYAML-2806360
No No Known Exploit
low severity /1000
Why?
Stack-based Buffer Overflow
SNYK-JAVA-ORGYAML-3016888
No Proof of Concept
low severity /1000
Why?
Stack-based Buffer Overflow
SNYK-JAVA-ORGYAML-3016889
No No Known Exploit
medium severity /1000
Why?
Stack-based Buffer Overflow
SNYK-JAVA-ORGYAML-3016891
No Proof of Concept
low severity /1000
Why?
Stack-based Buffer Overflow
SNYK-JAVA-ORGYAML-3113851
No No Known Exploit
medium severity /1000
Why?
Denial of Service (DoS)
SNYK-JAVA-ORGYAML-537645
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Vulnerabilities that could not be fixed

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[//]: # (snyk:metadata:{"prId":"b5f546af-c85f-4af1-bc17-9950d6898a11","prPublicId":"b5f546af-c85f-4af1-bc17-9950d6898a11","dependencies":[{"name":"com.github.librepdf:openpdf","from":"1.0.5","to":"1.1.0"},{"name":"com.h2database:h2","from":"1.4.197","to":"2.1.210"},{"name":"mysql:mysql-connector-java","from":"5.1.46","to":"8.0.28"},{"name":"org.apache.poi:poi","from":"3.17","to":"4.1.1"},{"name":"org.apache.poi:poi-ooxml","from":"3.17","to":"4.1.0"},{"name":"org.springframework.boot:spring-boot-devtools","from":"2.0.1.RELEASE","to":"2.5.13"},{"name":"org.springframework.boot:spring-boot-starter-data-jpa","from":"2.0.1.RELEASE","to":"2.7.11"},{"name":"org.springframework.boot:spring-boot-starter-security","from":"2.0.1.RELEASE","to":"2.7.11"},{"name":"org.springframework.boot:spring-boot-starter-thymeleaf","from":"2.0.1.RELEASE","to":"2.5.8"},{"name":"org.springframework.boot:spring-boot-starter-web","from":"2.0.1.RELEASE","to":"2.7.11"}],"packageManager":"maven","projectPublicId":"ee6b27c2-dc27-46be-9aa8-ca48bb00275b","projectUrl":"https://app.snyk.io/org/zeitgeist2018/project/ee6b27c2-dc27-46be-9aa8-ca48bb00275b?utm_source=github&utm_medium=referral&page=fix-pr","type":"user-initiated","patch":[],"vulns":["SNYK-JAVA-CHQOSLOGBACK-1726923","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1048302","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931","SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736","SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244","SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424","SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426","SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207","SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917","SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617","SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014","SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015","SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016","SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674","SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676","SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943","SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980","SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500","SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451","SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094","SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106","SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762","SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766","SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362","SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373","SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585","SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586","SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587","SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887","SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888","SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625","SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300","SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314","SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316","SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72445","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72447","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72450","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72451","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72882","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72883","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72884","SNYK-JAVA-COMFASTERXMLJACKSONDATATYPE-173759","SNYK-JAVA-COMH2DATABASE-2331071","SNYK-JAVA-COMH2DATABASE-2348247","SNYK-JAVA-COMH2DATABASE-3009896","SNYK-JAVA-COMMONSCODEC-561518","SNYK-JAVA-MYSQL-174574","SNYK-JAVA-MYSQL-1766958","SNYK-JAVA-MYSQL-2386864","SNYK-JAVA-MYSQL-451464","SNYK-JAVA-ORGAPACHEPOI-548686","SNYK-JAVA-ORGAPACHETOMCATEMBED-1017119","SNYK-JAVA-ORGAPACHETOMCATEMBED-1048292","SNYK-JAVA-ORGAPACHETOMCATEMBED-1061939","SNYK-JAVA-ORGAPACHETOMCATEMBED-1080637","SNYK-JAVA-ORGAPACHETOMCATEMBED-1080638","SNYK-JAVA-ORGAPACHETOMCATEMBED-1728264","SNYK-JAVA-ORGAPACHETOMCATEMBED-1728265","SNYK-JAVA-ORGAPACHETOMCATEMBED-1728266","SNYK-JAVA-ORGAPACHETOMCATEMBED-1728268","SNYK-JAVA-ORGAPACHETOMCATEMBED-3035793","SNYK-JAVA-ORGAPACHETOMCATEMBED-3097829","SNYK-JAVA-ORGAPACHETOMCATEMBED-3326459","SNYK-JAVA-ORGAPACHETOMCATEMBED-3369687","SNYK-JAVA-ORGAPACHETOMCATEMBED-451342","SNYK-JAVA-ORGAPACHETOMCATEMBED-451343","SNYK-JAVA-ORGAPACHETOMCATEMBED-451458","SNYK-JAVA-ORGAPACHETOMCATEMBED-451459","SNYK-JAVA-ORGAPACHETOMCATEMBED-451503","SNYK-JAVA-ORGAPACHETOMCATEMBED-451504","SNYK-JAVA-ORGAPACHETOMCATEMBED-451505","SNYK-JAVA-ORGAPACHETOMCATEMBED-451508","SNYK-JAVA-ORGAPACHETOMCATEMBED-538488","SNYK-JAVA-ORGAPACHETOMCATEMBED-570072","SNYK-JAVA-ORGAPACHETOMCATEMBED-584427","SNYK-JAVA-ORGAPACHEXMLBEANS-1060048","SNYK-JAVA-ORGBOUNCYCASTLE-1035561","SNYK-JAVA-ORGBOUNCYCASTLE-1296075","SNYK-JAVA-ORGBOUNCYCASTLE-2841508","SNYK-JAVA-ORGBOUNCYCASTLE-32369","SNYK-JAVA-ORGBOUNCYCASTLE-32412","SNYK-JAVA-ORGHIBERNATE-1041788","SNYK-JAVA-ORGHIBERNATE-584563","SNYK-JAVA-ORGHIBERNATEVALIDATOR-541187","SNYK-JAVA-ORGHIBERNATEVALIDATOR-568163","SNYK-JAVA-ORGSPRINGFRAMEWORK-1009832","SNYK-JAVA-ORGSPRINGFRAMEWORK-1296829","SNYK-JAVA-ORGSPRINGFRAMEWORK-31689","SNYK-JAVA-ORGSPRINGFRAMEWORK-451604","SNYK-JAVA-ORGSPRINGFRAMEWORK-559346","SNYK-JAVA-ORGSPRINGFRAMEWORK-72470","SNYK-JAVA-ORGSPRINGFRAMEWORK-2329097","SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878","SNYK-JAVA-ORGSPRINGFRAMEWORK-31651","SNYK-JAVA-ORGSPRINGFRAMEWORK-2434828","SNYK-JAVA-ORGSPRINGFRAMEWORK-3369749","SNYK-JAVA-ORGSPRINGFRAMEWORK-5422217","SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751","SNYK-JAVA-ORGSPRINGFRAMEWORK-2823313","SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634","SNYK-JAVA-ORGSPRINGFRAMEWORK-467268","SNYK-JAVA-ORGSPRINGFRAMEWORKBOOT-2438287","SNYK-JAVA-ORGSPRINGFRAMEWORKDATA-174140","SNYK-JAVA-ORGSPRINGFRAMEWORKDATA-451633","SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-1078232","SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-174111","SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-570204","SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-1290497","SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-2833359","SNYK-JAVA-ORGTHYMELEAF-1915389","SNYK-JAVA-ORGYAML-2806360","SNYK-JAVA-ORGYAML-3016888","SNYK-JAVA-ORGYAML-3016889","SNYK-JAVA-ORGYAML-3016891","SNYK-JAVA-ORGYAML-3113851","SNYK-JAVA-ORGYAML-537645"],"upgrade":["SNYK-JAVA-CHQOSLOGBACK-1726923","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1048302","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427","SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931","SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736","SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244","SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424","SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426","SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207","SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917","SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617","SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014","SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015","SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016","SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674","SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676","SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943","SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980","SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500","SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451","SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094","SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106","SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762","SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766","SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362","SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373","SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585","SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586","SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587","SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887","SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888","SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625","SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300","SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314","SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316","SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72445","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72447","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72450","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72451","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72882","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72883","SNYK-JAVA-COMFASTERXMLJACKSONCORE-72884","SNYK-JAVA-COMFASTERXMLJACKSONDATATYPE-173759","SNYK-JAVA-COMH2DATABASE-2331071","SNYK-JAVA-COMH2DATABASE-2348247","SNYK-JAVA-COMH2DATABASE-3009896","SNYK-JAVA-COMMONSCODEC-561518","SNYK-JAVA-MYSQL-174574","SNYK-JAVA-MYSQL-1766958","SNYK-JAVA-MYSQL-2386864","SNYK-JAVA-MYSQL-451464","SNYK-JAVA-ORGAPACHEPOI-548686","SNYK-JAVA-ORGAPACHETOMCATEMBED-1017119","SNYK-JAVA-ORGAPACHETOMCATEMBED-1048292","SNYK-JAVA-ORGAPACHETOMCATEMBED-1061939","SNYK-JAVA-ORGAPACHETOMCATEMBED-1080637","SNYK-JAVA-ORGAPACHETOMCATEMBED-1080638","SNYK-JAVA-ORGAPACHETOMCATEMBED-1728264","SNYK-JAVA-ORGAPACHETOMCATEMBED-1728265","SNYK-JAVA-ORGAPACHETOMCATEMBED-1728266","SNYK-JAVA-ORGAPACHETOMCATEMBED-1728268","SNYK-JAVA-ORGAPACHETOMCATEMBED-3035793","SNYK-JAVA-ORGAPACHETOMCATEMBED-3097829","SNYK-JAVA-ORGAPACHETOMCATEMBED-3326459","SNYK-JAVA-ORGAPACHETOMCATEMBED-3369687","SNYK-JAVA-ORGAPACHETOMCATEMBED-451342","SNYK-JAVA-ORGAPACHETOMCATEMBED-451343","SNYK-JAVA-ORGAPACHETOMCATEMBED-451458","SNYK-JAVA-ORGAPACHETOMCATEMBED-451459","SNYK-JAVA-ORGAPACHETOMCATEMBED-451503","SNYK-JAVA-ORGAPACHETOMCATEMBED-451504","SNYK-JAVA-ORGAPACHETOMCATEMBED-451505","SNYK-JAVA-ORGAPACHETOMCATEMBED-451508","SNYK-JAVA-ORGAPACHETOMCATEMBED-538488","SNYK-JAVA-ORGAPACHETOMCATEMBED-570072","SNYK-JAVA-ORGAPACHETOMCATEMBED-584427","SNYK-JAVA-ORGAPACHEXMLBEANS-1060048","SNYK-JAVA-ORGBOUNCYCASTLE-1035561","SNYK-JAVA-ORGBOUNCYCASTLE-1296075","SNYK-JAVA-ORGBOUNCYCASTLE-2841508","SNYK-JAVA-ORGBOUNCYCASTLE-32369","SNYK-JAVA-ORGBOUNCYCASTLE-32412","SNYK-JAVA-ORGHIBERNATE-1041788","SNYK-JAVA-ORGHIBERNATE-584563","SNYK-JAVA-ORGHIBERNATEVALIDATOR-541187","SNYK-JAVA-ORGHIBERNATEVALIDATOR-568163","SNYK-JAVA-ORGSPRINGFRAMEWORK-1009832","SNYK-JAVA-ORGSPRINGFRAMEWORK-1296829","SNYK-JAVA-ORGSPRINGFRAMEWORK-2329097","SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878","SNYK-JAVA-ORGSPRINGFRAMEWORK-2434828","SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751","SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634","SNYK-JAVA-ORGSPRINGFRAMEWORK-2823313","SNYK-JAVA-ORGSPRINGFRAMEWORK-31651","SNYK-JAVA-ORGSPRINGFRAMEWORK-31689","SNYK-JAVA-ORGSPRINGFRAMEWORK-3369749","SNYK-JAVA-ORGSPRINGFRAMEWORK-451604","SNYK-JAVA-ORGSPRINGFRAMEWORK-467268","SNYK-JAVA-ORGSPRINGFRAMEWORK-5422217","SNYK-JAVA-ORGSPRINGFRAMEWORK-559346","SNYK-JAVA-ORGSPRINGFRAMEWORK-72470","SNYK-JAVA-ORGSPRINGFRAMEWORKBOOT-2438287","SNYK-JAVA-ORGSPRINGFRAMEWORKDATA-174140","SNYK-JAVA-ORGSPRINGFRAMEWORKDATA-451633","SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-1078232","SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-1290497","SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-174111","SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-2833359","SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-570204","SNYK-JAVA-ORGTHYMELEAF-1915389","SNYK-JAVA-ORGYAML-2806360","SNYK-JAVA-ORGYAML-3016888","SNYK-JAVA-ORGYAML-3016889","SNYK-JAVA-ORGYAML-3016891","SNYK-JAVA-ORGYAML-3113851","SNYK-JAVA-ORGYAML-537645"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[390,563,563,560,555,555,630,563,630,563,630,563,630,630,563,563,630,630,null,null,525,520,520,630,705,555,555,675,563,555,555,555,555,555,630,630,630,630,563,563,563,630,563,563,563,563,563,563,563,563,630,563,563,563,563,563,563,563,563,563,525,630,715,380,335,465,520,480,590,400,430,490,415,500,445,525,390,415,600,335,335,475,415,525,675,445,525,550,445,640,525,305,675,415,565,525,415,null,null,null,null,null,null,null,null,null,null,445,null,null,null,null,null,null,null,null,null,415,410,445,null,null,null,null,null,null,null,635,null,null,null,null,null,n...