Skip to content

[Snyk] Fix for 34 vulnerabilities - #173

Open
maximejf42 wants to merge 1 commit into
masterfrom
snyk-fix-75ac4bc02e06603bc0af71784a0e3d01
Open

[Snyk] Fix for 34 vulnerabilities#173
maximejf42 wants to merge 1 commit into
masterfrom
snyk-fix-75ac4bc02e06603bc0af71784a0e3d01

Conversation

@maximejf42

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to fix 34 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

  • DataProcessing/datax-utility/pom.xml

Vulnerabilities that will be fixed with an upgrade:

Issue Score Upgrade
high severity Denial of Service (DoS)
SNYK-JAVA-NETMINIDEV-3369748
  696   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
Proof of Concept
medium severity Uncontrolled Recursion
SNYK-JAVA-COMNIMBUSDS-10691768
  666   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
Proof of Concept
high severity Uncontrolled Recursion
SNYK-JAVA-ORGAPACHECOMMONS-10734078
  654   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
high severity Elliptic Curve Key Disclosure
SNYK-JAVA-COMNIMBUSDS-30205
  649   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Improper Check for Unusual or Exceptional Conditions
SNYK-JAVA-COMNIMBUSDS-536068
  636   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
Proof of Concept
medium severity Observable Discrepancy
SNYK-JAVA-ORGBOUNCYCASTLE-8731360
  616   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
Proof of Concept
high severity Insufficient Verification of Data Authenticity
SNYK-JAVA-COMNIMBUSDS-3110420
  589   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
high severity Invalid Elliptic Curve Attack
SNYK-JAVA-COMNIMBUSDS-31558
  589   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
high severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-COMNIMBUSDS-6247633
  589   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
high severity Information Exposure
SNYK-JAVA-ORGBOUNCYCASTLE-1035561
  589   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
high severity Insufficient Validation
SNYK-JAVA-ORGBOUNCYCASTLE-32340
  589   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
high severity Insecure Encryption
SNYK-JAVA-ORGBOUNCYCASTLE-32361
  589   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
high severity Insecure Encryption
SNYK-JAVA-ORGBOUNCYCASTLE-32362
  589   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
high severity Signature Validation Bypass
SNYK-JAVA-ORGBOUNCYCASTLE-32364
  589   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
high severity Insecure Encryption
SNYK-JAVA-ORGBOUNCYCASTLE-32366
  584   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
high severity Insecure Encryption
SNYK-JAVA-ORGBOUNCYCASTLE-32368
  584   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Cryptographic Issues
SNYK-JAVA-ORGBOUNCYCASTLE-2841508
  561   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
Proof of Concept
medium severity Deserialization of Untrusted Data
SNYK-JAVA-COMGOOGLECODEGSON-1730327
  539   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGBOUNCYCASTLE-11777856
  529   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGBOUNCYCASTLE-11789705
  529   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-NETMINIDEV-1078499
  509   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Timing Attack
SNYK-JAVA-ORGBOUNCYCASTLE-32363
  509   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Cryptographic Issues
SNYK-JAVA-ORGBOUNCYCASTLE-32367
  509   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JAVA-ORGBOUNCYCASTLE-6084022
  489   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-31519
  479   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-31520
  479   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-NETMINIDEV-1298655
  479   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Directory Traversal
SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-31517
  479   org.apache.spark:spark-core_2.11:
2.3.0 -> 2.4.0
No Known Exploit
medium severity Timing Attack
SNYK-JAVA-ORGBOUNCYCASTLE-1296075
  479   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
medium severity Information Exposure
SNYK-JAVA-ORGBOUNCYCASTLE-5771339
  449   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
low severity Information Exposure
SNYK-JAVA-COMMONSCODEC-561518
  399   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
org.apache.spark:spark-core_2.11:
2.3.0 -> 2.4.0
No Known Exploit
low severity Information Exposure
SNYK-JAVA-ORGBOUNCYCASTLE-173771
  399   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
low severity Insufficient Validation
SNYK-JAVA-ORGBOUNCYCASTLE-32365
  399   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit
low severity Cryptographic Issues
SNYK-JAVA-COMNIMBUSDS-3110417
  369   com.microsoft.azure:azure-keyvault-webkey:
1.1 -> 1.1.1
No Known Exploit

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Deserialization of Untrusted Data
🦉 Cryptographic Issues
🦉 Allocation of Resources Without Limits or Throttling
🦉 More lessons are available in Snyk Learn

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-NETMINIDEV-3369748
- https://snyk.io/vuln/SNYK-JAVA-COMNIMBUSDS-10691768
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-10734078
- https://snyk.io/vuln/SNYK-JAVA-COMNIMBUSDS-30205
- https://snyk.io/vuln/SNYK-JAVA-COMNIMBUSDS-536068
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-8731360
- https://snyk.io/vuln/SNYK-JAVA-COMNIMBUSDS-3110420
- https://snyk.io/vuln/SNYK-JAVA-COMNIMBUSDS-31558
- https://snyk.io/vuln/SNYK-JAVA-COMNIMBUSDS-6247633
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-1035561
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32340
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32361
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32362
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32364
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32366
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32368
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-2841508
- https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-11777856
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-11789705
- https://snyk.io/vuln/SNYK-JAVA-NETMINIDEV-1078499
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32363
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32367
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-6084022
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-31519
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-31520
- https://snyk.io/vuln/SNYK-JAVA-NETMINIDEV-1298655
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-31517
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-1296075
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-5771339
- https://snyk.io/vuln/SNYK-JAVA-COMMONSCODEC-561518
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-173771
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32365
- https://snyk.io/vuln/SNYK-JAVA-COMNIMBUSDS-3110417
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants