Skip to content

[Snyk] Security upgrade org.mock-server:mockserver-junit-jupiter from 5.11.1 to 5.15.0#462

Merged
mergify[bot] merged 3 commits into
masterfrom
snyk-fix-63ced4db2e53fe33dfb4d23bc40f695c
Sep 11, 2023
Merged

[Snyk] Security upgrade org.mock-server:mockserver-junit-jupiter from 5.11.1 to 5.15.0#462
mergify[bot] merged 3 commits into
masterfrom
snyk-fix-63ced4db2e53fe33dfb4d23bc40f695c

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • core-java-modules/core-java-11-2/pom.xml

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity Reachability
medium severity 520/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424
org.mock-server:mockserver-junit-jupiter:
5.11.1 -> 5.15.0
No Proof of Concept No Path Found
medium severity 520/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426
org.mock-server:mockserver-junit-jupiter:
5.11.1 -> 5.15.0
No Proof of Concept No Path Found
medium severity 475/1000
Why? Has a fix available, CVSS 6.5
HTTP Response Splitting
SNYK-JAVA-IONETTY-3167773
org.mock-server:mockserver-junit-jupiter:
5.11.1 -> 5.15.0
No No Known Exploit No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Arbitrary Code Execution
SNYK-JAVA-ORGAPACHECOMMONS-3043138
org.mock-server:mockserver-junit-jupiter:
5.11.1 -> 5.15.0
No Proof of Concept No Path Found
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGYAML-2806360
org.mock-server:mockserver-junit-jupiter:
5.11.1 -> 5.15.0
No No Known Exploit No Path Found
low severity 410/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
Stack-based Buffer Overflow
SNYK-JAVA-ORGYAML-3016888
org.mock-server:mockserver-junit-jupiter:
5.11.1 -> 5.15.0
No Proof of Concept No Path Found
low severity 335/1000
Why? Has a fix available, CVSS 3.7
Stack-based Buffer Overflow
SNYK-JAVA-ORGYAML-3016889
org.mock-server:mockserver-junit-jupiter:
5.11.1 -> 5.15.0
No No Known Exploit No Path Found
medium severity 440/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 4.3
Stack-based Buffer Overflow
SNYK-JAVA-ORGYAML-3016891
org.mock-server:mockserver-junit-jupiter:
5.11.1 -> 5.15.0
No Proof of Concept No Path Found
low severity 335/1000
Why? Has a fix available, CVSS 3.7
Stack-based Buffer Overflow
SNYK-JAVA-ORGYAML-3113851
org.mock-server:mockserver-junit-jupiter:
5.11.1 -> 5.15.0
No No Known Exploit No Path Found

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Denial of Service (DoS)
🦉 Arbitrary Code Execution
🦉 More lessons are available in Snyk Learn

@mergify mergify Bot merged commit e66f19a into master Sep 11, 2023
@mergify mergify Bot deleted the snyk-fix-63ced4db2e53fe33dfb4d23bc40f695c branch September 11, 2023 21:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants