Skip to content

[Snyk] Upgrade com.thoughtworks.xstream:xstream from 1.4.5 to 1.4.21 - #1

Open
chkp-roniz wants to merge 1 commit into
mainfrom
snyk-upgrade-41788538f7c9245c22cae8738ccc09b5
Open

[Snyk] Upgrade com.thoughtworks.xstream:xstream from 1.4.5 to 1.4.21#1
chkp-roniz wants to merge 1 commit into
mainfrom
snyk-upgrade-41788538f7c9245c22cae8738ccc09b5

Conversation

@chkp-roniz

@chkp-ronizchkp-roniz commented Dec 9, 2024

Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to upgrade com.thoughtworks.xstream:xstream from 1.4.5 to 1.4.21.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 23 versions ahead of your current version.

  • The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

IssueScoreExploit Maturity
high severityXML External Entity (XXE) Injection
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-30385		589No Known Exploit
high severityDenial of Service (DoS)
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-31394		589No Known Exploit
high severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-8352924		589Proof of Concept
high severityArbitrary Code Execution
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569181		589Proof of Concept
high severityArbitrary Code Execution
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569182		589Proof of Concept
high severityRemote Code Execution (RCE)
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569183		589Mature
high severityArbitrary Code Execution
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569185		589Proof of Concept
high severityArbitrary Code Execution
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569186		589Proof of Concept
high severityArbitrary Code Execution
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569187		589Proof of Concept
high severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1040458		589Proof of Concept
high severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088337		589Proof of Concept
high severityArbitrary Code Execution
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569176		589Proof of Concept
high severityArbitrary Code Execution
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569177		589Proof of Concept
high severityArbitrary Code Execution
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569178		589Proof of Concept
high severityArbitrary Code Execution
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569179		589Proof of Concept
high severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569190		589Proof of Concept
high severityServer-Side Request Forgery (SSRF)
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569191		589Proof of Concept
high severityDenial of Service (DoS)
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-2388977		589No Known Exploit
high severityArbitrary Code Execution
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569180		589Proof of Concept
medium severityDenial of Service (DoS)
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-3091180		589No Known Exploit
medium severityDenial of Service (DoS)
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-3182897		589Proof of Concept
medium severityInsecure XML deserialization
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-460764		589Mature
medium severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088335		589Proof of Concept
medium severityArbitrary File Deletion
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1051966		589Proof of Concept
medium severityServer-Side Request Forgery (SSRF)
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1051967		589Mature
medium severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088328		589Proof of Concept
medium severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088329		589Proof of Concept
medium severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088330		589Proof of Concept
medium severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088331		589Proof of Concept
medium severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088332		589Proof of Concept
medium severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088333		589Proof of Concept
medium severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088334		589Proof of Concept
medium severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088336		589Proof of Concept
medium severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1088338		589Proof of Concept
medium severityDeserialization of Untrusted Data
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1294540		589Proof of Concept
medium severityDenial of Service (DoS)
SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-1569189		589Proof of Concept

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade com.thoughtworks.xstream:xstream from 1.4.5 to 1.4.21
a7b3311
Snyk has created this PR to upgrade com.thoughtworks.xstream:xstream from 1.4.5 to 1.4.21.
See this package in maven:
com.thoughtworks.xstream:xstream
See this project in Snyk:
https://app.snyk.io/org/chkp-roniz/project/4a889dff-1acd-46d2-a0bd-d60848588afc?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@chkp-roniz@snyk-bot