Skip to content

[Snyk] Security upgrade org.mock-server:mockserver-netty from 5.11.2 to 5.15.0#471

Closed
Centaurioun wants to merge 3 commits intomasterfrom
snyk-fix-5582daeb969ed3235377c52d16faac3c
Closed

[Snyk] Security upgrade org.mock-server:mockserver-netty from 5.11.2 to 5.15.0#471
Centaurioun wants to merge 3 commits intomasterfrom
snyk-fix-5582daeb969ed3235377c52d16faac3c

Conversation

@Centaurioun
Copy link
Copy Markdown
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • apache-httpclient-2/pom.xml

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity Reachability
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244
org.mock-server:mockserver-netty:
5.11.2 -> 5.15.0
No No Known Exploit No Path Found
medium severity 520/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424
org.mock-server:mockserver-netty:
5.11.2 -> 5.15.0
No Proof of Concept No Path Found
medium severity 520/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426
org.mock-server:mockserver-netty:
5.11.2 -> 5.15.0
No Proof of Concept No Path Found
medium severity 475/1000
Why? Has a fix available, CVSS 6.5
HTTP Response Splitting
SNYK-JAVA-IONETTY-3167773
org.mock-server:mockserver-netty:
5.11.2 -> 5.15.0
No No Known Exploit No Path Found
high severity 630/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Arbitrary Code Execution
SNYK-JAVA-ORGAPACHECOMMONS-3043138
org.mock-server:mockserver-netty:
5.11.2 -> 5.15.0
No Proof of Concept No Path Found
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGYAML-2806360
org.mock-server:mockserver-netty:
5.11.2 -> 5.15.0
No No Known Exploit No Path Found
low severity 410/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
Stack-based Buffer Overflow
SNYK-JAVA-ORGYAML-3016888
org.mock-server:mockserver-netty:
5.11.2 -> 5.15.0
No Proof of Concept No Path Found
low severity 335/1000
Why? Has a fix available, CVSS 3.7
Stack-based Buffer Overflow
SNYK-JAVA-ORGYAML-3016889
org.mock-server:mockserver-netty:
5.11.2 -> 5.15.0
No No Known Exploit No Path Found
medium severity 440/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 4.3
Stack-based Buffer Overflow
SNYK-JAVA-ORGYAML-3016891
org.mock-server:mockserver-netty:
5.11.2 -> 5.15.0
No Proof of Concept No Path Found
low severity 335/1000
Why? Has a fix available, CVSS 3.7
Stack-based Buffer Overflow
SNYK-JAVA-ORGYAML-3113851
org.mock-server:mockserver-netty:
5.11.2 -> 5.15.0
No No Known Exploit No Path Found

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Denial of Service (DoS)
🦉 Denial of Service (DoS)
🦉 More lessons are available in Snyk Learn

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants