GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — [Snyk] Upgrade org.springframework:spring-core from 5.3.18 to 5.3.39 by cld-sec · Pull Request #365 · cloudinary/cloudinary_java

Conversation

@cld-sec

@cld-sec cld-sec commented Dec 4, 2024

Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to upgrade org.springframework:spring-core from 5.3.18 to 5.3.39.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 21 versions ahead of your current version.

  • The recommended version was released on 4 months ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Open Redirect
SNYK-JAVA-ORGSPRINGFRAMEWORK-6261586
300 Proof of Concept
high severity Open Redirect
SNYK-JAVA-ORGSPRINGFRAMEWORK-6444790
300 No Known Exploit
medium severity Open Redirect
SNYK-JAVA-ORGSPRINGFRAMEWORK-6597980
300 No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-ORGSPRINGFRAMEWORK-7687447
300 No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-ORGSPRINGFRAMEWORK-2823313
300 No Known Exploit
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGSPRINGFRAMEWORK-3369749
300 No Known Exploit
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGSPRINGFRAMEWORK-5422217
300 No Known Exploit
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGSPRINGFRAMEWORK-7687446
300 No Known Exploit
low severity Improper Handling of Case Sensitivity
SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634
300 Proof of Concept
critical severity Improper Access Control
SNYK-JAVA-ORGSPRINGFRAMEWORK-3369852
300 Proof of Concept

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

  • 🧐 View latest project report
  • 📜 Customise PR templates
  • 🛠 Adjust upgrade PR settings
  • 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
snyk-bot added 6 commits December 4, 2024 19:47
@snyk-bot
fix: upgrade org.springframework:spring-core from 5.3.18 to 5.3.39
1d23d31
Snyk has created this PR to upgrade org.springframework:spring-core from 5.3.18 to 5.3.39.

See this package in maven:
org.springframework:spring-core

See this project in Snyk:
https://app.snyk.io/org/cloudinaryltd/project/90311634-5d30-4372-b002-937177c936e9?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade org.springframework:spring-core from 5.3.18 to 5.3.39
bd9d866
Snyk has created this PR to upgrade org.springframework:spring-core from 5.3.18 to 5.3.39.

See this package in maven:
org.springframework:spring-core

See this project in Snyk:
https://app.snyk.io/org/cloudinaryltd/project/87242f9d-cc12-41a3-927a-5b38ccf32020?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade org.springframework:spring-core from 5.3.18 to 5.3.39
23b7243
Snyk has created this PR to upgrade org.springframework:spring-core from 5.3.18 to 5.3.39.

See this package in maven:
org.springframework:spring-core

See this project in Snyk:
https://app.snyk.io/org/cloudinaryltd/project/87242f9d-cc12-41a3-927a-5b38ccf32020?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade org.springframework:spring-core from 5.3.18 to 5.3.39
9ee4da1
Snyk has created this PR to upgrade org.springframework:spring-core from 5.3.18 to 5.3.39.

See this package in maven:
org.springframework:spring-core

See this project in Snyk:
https://app.snyk.io/org/cloudinaryltd/project/87242f9d-cc12-41a3-927a-5b38ccf32020?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade org.springframework:spring-core from 5.3.18 to 5.3.39
ef7d6f5
Snyk has created this PR to upgrade org.springframework:spring-core from 5.3.18 to 5.3.39.

See this package in maven:
org.springframework:spring-core

See this project in Snyk:
https://app.snyk.io/org/cloudinaryltd/project/87242f9d-cc12-41a3-927a-5b38ccf32020?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade org.springframework:spring-core from 5.3.18 to 5.3.39
e54c938
Snyk has created this PR to upgrade org.springframework:spring-core from 5.3.18 to 5.3.39.

See this package in maven:
org.springframework:spring-core

See this project in Snyk:
https://app.snyk.io/org/cloudinaryltd/project/87242f9d-cc12-41a3-927a-5b38ccf32020?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

2 participants

@cld-sec @snyk-bot
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.