Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

[Snyk] Fix for 8 vulnerabilities#100

Open
mrrajan wants to merge 1 commit into
mainmrrajan/devfile-sample-java-springboot-basic:mainfrom
snyk-fix-e68a3f65faf5dd96d890984701c8c4ebmrrajan/devfile-sample-java-springboot-basic:snyk-fix-e68a3f65faf5dd96d890984701c8c4ebCopy head branch name to clipboard
Open

[Snyk] Fix for 8 vulnerabilities#100
mrrajan wants to merge 1 commit into
mainmrrajan/devfile-sample-java-springboot-basic:mainfrom
snyk-fix-e68a3f65faf5dd96d890984701c8c4ebmrrajan/devfile-sample-java-springboot-basic:snyk-fix-e68a3f65faf5dd96d890984701c8c4ebCopy head branch name to clipboard

Conversation

@mrrajan

@mrrajan mrrajan commented Aug 19, 2025

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to fix 8 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

  • pom.xml

Vulnerabilities that will be fixed with an upgrade:

Issue Score Upgrade
high severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-IONETTY-11799531
  721   io.netty:netty-codec-http2:
4.1.99.Final -> 4.1.124.Final
io.quarkus:quarkus-oidc:
2.13.7.Final -> 3.15.6.1
io.vertx:vertx-web:
4.3.7 -> 4.5.18
Major version upgrade No Known Exploit
high severity Improper Resource Shutdown or Release
SNYK-JAVA-ORGAPACHETOMCAT-11799151
  721   org.apache.tomcat:tomcat-catalina:
11.0.0-M10 -> 11.0.10
No Known Exploit
high severity Improper Resource Shutdown or Release
SNYK-JAVA-ORGAPACHETOMCATEMBED-11799152
  721   org.apache.tomcat.embed:tomcat-embed-core:
10.1.0 -> 10.1.44
No Known Exploit
high severity Relative Path Traversal
SNYK-JAVA-ORGSPRINGFRAMEWORK-11958848
  696   org.springframework.security:spring-security-web:
5.7.3 -> 6.4.9
org.springframework:spring-expression:
6.0.6 -> 6.2.10
org.springframework:spring-webmvc:
6.0.6 -> 6.2.10
Major version upgrade No Known Exploit
medium severity Session Fixation
SNYK-JAVA-ORGAPACHETOMCAT-11798985
  631   org.apache.tomcat:tomcat-catalina:
11.0.0-M10 -> 11.0.10
No Known Exploit
medium severity Session Fixation
SNYK-JAVA-ORGAPACHETOMCATEMBED-11798986
  631   org.apache.tomcat.embed:tomcat-embed-core:
10.1.0 -> 10.1.44
No Known Exploit
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGBOUNCYCASTLE-11777856
  601   io.quarkus:quarkus-keycloak-authorization:
2.13.7.Final -> 3.2.5.Final
org.keycloak:keycloak-core:
16.1.0 -> 19.0.0
Major version upgrade No Known Exploit
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGBOUNCYCASTLE-11789705
  601   io.quarkus:quarkus-keycloak-authorization:
2.13.7.Final -> 3.2.5.Final
org.keycloak:keycloak-core:
16.1.0 -> 19.0.0
Major version upgrade No Known Exploit

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling
🦉 Relative Path Traversal

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.