Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

Comments

Close side panel

[Snyk] Fix for 83 vulnerabilities#1

Open
neilmax wants to merge 1 commit intomasterneilmax/json-iterator-java:masterfrom
snyk-fix-67b0efddf46578342ba0da5512289b77neilmax/json-iterator-java:snyk-fix-67b0efddf46578342ba0da5512289b77Copy head branch name to clipboard
Open

[Snyk] Fix for 83 vulnerabilities#1
neilmax wants to merge 1 commit intomasterneilmax/json-iterator-java:masterfrom
snyk-fix-67b0efddf46578342ba0da5512289b77neilmax/json-iterator-java:snyk-fix-67b0efddf46578342ba0da5512289b77Copy head branch name to clipboard

Conversation

@neilmax
Copy link
Owner

@neilmax neilmax commented Jun 19, 2024

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to fix 83 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

  • demo/pom.xml

Vulnerabilities that will be fixed with an upgrade:

Issue Score Upgrade
critical severity Remote Code Execution
SNYK-JAVA-COMALIBABA-73578		   750   com.alibaba:fastjson:
1.2.22 -> 1.2.83
No Path Found Mature
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917		   705   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Mature
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015		   675   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Mature
medium severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426		   670   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
Reachable Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMALIBABA-2859222		   630   com.alibaba:fastjson:
1.2.22 -> 1.2.83
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-31507		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-32043		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664		   630   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
high severity Integer Overflow
SNYK-JAVA-COMGOOGLEPROTOBUF-173761		   590   com.google.protobuf:protobuf-java:
3.2.0rc2 -> 3.16.3
No Path Found No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-ORGAPACHETHRIFT-474610		   568   org.apache.thrift:libthrift:
0.9.1 -> 0.17.0
No Path Found No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-31519		   565   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
Reachable No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72445		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72446		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72447		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72450		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72451		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72882		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72883		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72884		   563   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMALIBABA-570967		   555   com.alibaba:fastjson:
1.2.22 -> 1.2.83
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-31573		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-32044		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-32111		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-6056407		   555   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244		   525   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-COMGOOGLEPROTOBUF-2331703		   525   com.google.protobuf:protobuf-java:
3.2.0rc2 -> 3.16.3
No Path Found No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-COMGOOGLEPROTOBUF-3167772		   525   com.google.protobuf:protobuf-java:
3.2.0rc2 -> 3.16.3
No Path Found No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-ORGAPACHETHRIFT-1074898		   525   org.apache.thrift:libthrift:
0.9.1 -> 0.17.0
No Path Found No Known Exploit
high severity Authentication Bypass
SNYK-JAVA-ORGAPACHETHRIFT-451680		   525   org.apache.thrift:libthrift:
0.9.1 -> 0.17.0
No Path Found No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424		   520   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
medium severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207		   520   com.fasterxml.jackson.core:jackson-databind:
2.8.5 -> 2.12.7.1
com.fasterxml.jackson.module:jackson-module-afterburner:
2.8.5 -> 2.13.5
No Path Found Proof of Concept
medium severity Denial of Service (DoS)
SNYK-JAVA-COMSQUAREUPOKIO-5773320		   520   com.squareup.moshi:moshi:
1.3.1 -> 1.12.0
No Path Found Proof of Concept
medium severity Man-in-the-Middle (MitM)
SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-30646		   495   org.apache.thrift:libthrift:
0.9.1 -> 0.17.0
No Path Found Proof of Concept
medium severity Insufficient Validation
SNYK-JAVA-ORGAPACHETHRIFT-564358		   483   org.apache.thrift:libthrift:
0.9.1 -> 0.17.0
No Path Found No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-COMGOOGLEPROTOBUF-3040284		   435   com.google.protobuf:protobuf-java:
3.2.0rc2 -> 3.16.3
No Path Found No Known Exploit
medium severity Improper Input Validation
SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-1048058		   415   org.apache.thrift:libthrift:
0.9.1 -> 0.17.0
No Path Found No Known Exploit
medium severity Directory Traversal
SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-31517		   415   org.apache.thrift:libthrift:
0.9.1 -> 0.17.0
No Path Found No Known Exploit
low severity Information Exposure
SNYK-JAVA-JUNIT-1017047		   370   junit:junit:
4.12 -> 4.13.1
No Path Found Proof of Concept
low severity Information Exposure
SNYK-JAVA-COMMONSCODEC-561518		   335   org.apache.thrift:libthrift:
0.9.1 -> 0.17.0
No Path Found No Known Exploit

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Deserialization of Untrusted Data
🦉 Remote Code Execution
🦉 Denial of Service (DoS)
🦉 More lessons are available in Snyk Learn

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"com.alibaba:fastjson","from":"1.2.22","to":"1.2.83"},{"name":"com.fasterxml.jackson.core:jackson-databind","from":"2.8.5","to":"2.12.7.1"},{"name":"com.fasterxml.jackson.module:jackson-module-afterburner","from":"2.8.5","to":"2.13.5"},{"name":"com.google.protobuf:protobuf-java","from":"3.2.0rc2","to":"3.16.3"},{"name":"com.squareup.moshi:moshi","from":"1.3.1","to":"1.12.0"},{"name":"junit:junit","from":"4.12","to":"4.13.1"},{"name":"org.apache.thrift:libthrift","from":"0.9.1","to":"0.17.0"}],"env":"prod","issuesToFix":[{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMALIBABA-2859222","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMALIBABA-570967","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Mature","id":"SNYK-JAVA-COMALIBABA-73578","priority_score":750,"priority_score_factors":[{"type":"exploit","label":"High","score":150},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"9","score":450},{"type":"scoreVersion","label":"v1","score":1}],"severity":"critical","title":"Remote Code Execution"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244","priority_score":525,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Denial of Service (DoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424","priority_score":520,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"5.9","score":295},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Denial of Service (DoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426","priority_score":670,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"reachabilityBucket","label":"reachable","score":150},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"5.9","score":295},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Denial of Service (DoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-31507","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-31573","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-32043","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-32044","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-32111","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207","priority_score":520,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"5.9","score":295},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Mature","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917","priority_score":705,"priority_score_factors":[{"type":"exploit","label":"High","score":150},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Mature","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015","priority_score":675,"priority_score_factors":[{"type":"exploit","label":"Functional","score":120},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-6056407","priority_score":555,"priority_score_factors":[{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664","priority_score":630,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":75},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-72445","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-72446","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-72447","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Deserialization of Untrusted Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449","priority_score":563,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":8},{"type":"fixability","label":true,"score":150},{"type":"cvssScore...

@snyk-bot
fix: demo/pom.xml to reduce vulnerabilities
8fafb8a 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMALIBABA-73578
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426
- https://snyk.io/vuln/SNYK-JAVA-COMALIBABA-2859222
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-31507
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-32043
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664
- https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-173761
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-474610
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-31519
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72445
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72446
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72447
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72450
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72451
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72882
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72883
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72884
- https://snyk.io/vuln/SNYK-JAVA-COMALIBABA-570967
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-31573
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-32044
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-32111
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-6056407
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244
- https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-2331703
- https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3167772
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-1074898
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-451680
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207
- https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUPOKIO-5773320
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-30646
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-564358
- https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3040284
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-1048058
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-31517
- https://snyk.io/vuln/SNYK-JAVA-JUNIT-1017047
- https://snyk.io/vuln/SNYK-JAVA-COMMONSCODEC-561518
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@neilmax @snyk-bot
Morty Proxy This is a proxified and sanitized view of the page, visit original site.