8000 [Snyk] Security upgrade org.wildfly.security.elytron-web:undertow-server from 1.9.0.Final to 1.10.2.Final by oran-legit · Pull Request #278 · ZatrosSecurity/keycloak · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

[Snyk] Security upgrade org.wildfly.security.elytron-web:undertow-server from 1.9.0.Final to 1.10.2.Final #278

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

oran-legit
Copy link

snyk-top-banner

Snyk has created this PR to fix 10 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

< 8000 ul dir="auto">
  • pom.xml
  • Vulnerabilities that will be fixed with an upgrade:

    Issue Score Upgrade
    high severity Uncontrolled Resource Consumption ('Resource Exhaustion')
    SNYK-JAVA-IOUNDERTOW-7300153
      756   org.wildfly.security.elytron-web:undertow-server:
    1.9.0.Final -> 1.10.2.Final
    Proof of Concept
    critical severity HTTP Request Smuggling
    SNYK-JAVA-IOUNDERTOW-8383402
      669   org.wildfly.security.elytron-web:undertow-server:
    1.9.0.Final -> 1.10.2.Final
    No Known Exploit
    high severity Uncontrolled Resource Consumption
    SNYK-JAVA-IOUNDERTOW-7300152
      649   org.wildfly.security.elytron-web:undertow-server:
    1.9.0.Final -> 1.10.2.Final
    No Known Exploit
    high severity Denial of Service (DoS)
    SNYK-JAVA-IOUNDERTOW-7984545
      649   org.wildfly.security.elytron-web:undertow-server:
    1.9.0.Final -> 1.10.2.Final
    No Known Exploit
    high severity Improper Input Validation
    SNYK-JAVA-IOUNDERTOW-6567186
      589   org.wildfly.security.elytron-web:undertow-server:
    1.9.0.Final -> 1.10.2.Final
    No Known Exploit
    high severity Allocation of Resources Without Limits or Throttling
    SNYK-JAVA-IOUNDERTOW-6669948
      589   org.wildfly.security.elytron-web:undertow-server:
    1.9.0.Final -> 1.10.2.Final
    No Known Exploit
    high severity Uncontrolled Resource Consumption
    SNYK-JAVA-ORGJBOSSXNIO-6403375
      589   org.wildfly.security.elytron-web:undertow-server:
    1.9.0.Final -> 1.10.2.Final
    No Known Exploit
    medium severity Race Condition
    SNYK-JAVA-IOUNDERTOW-7707751
      559   org.wildfly.security.elytron-web:undertow-server:
    1.9.0.Final -> 1.10.2.Final
    No Known Exploit
    medium severity Directory Traversal
    SNYK-JAVA-IOUNDERTOW-7361775
      479   org.wildfly.security.elytron-web:undertow-server:
    1.9.0.Final -> 1.10.2.Final
    No Known Exploit
    low severity Memory Leak
    SNYK-JAVA-IOUNDERTOW-7433721
      329   org.wildfly.security.elytron-web:undertow-server:
    1.9.0.Final -> 1.10.2.Final
    No Known Exploit

    Important

    • Check the changes in this PR to ensure they won't cause issues with your project.
    • Max score is 1000. Note that the real score may have changed since the PR was raised.
    • This PR was automatically created by Snyk using the credentials of a real user.

    Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

    For more information:
    🧐 View latest project report
    📜 Customise PR templates
    🛠 Adjust project settings
    📚 Read about Snyk's upgrade logic


    Learn how to fix vulnerabilities with free interactive lessons:

    🦉 Improper Input Validation
    🦉 Allocation of Resources Without Limits or Throttling
    🦉 Uncontrolled Resource Consumption
    🦉 More lessons are available in Snyk Learn

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Labels
    None yet
    Projects
    None yet
    Development

    Successfully merging this pull request may close these issues.

    2 participants
    0