Skip to content

[Snyk] Upgrade org.springframework.boot:spring-boot-starter-web from 3.3.2 to 3.5.6#3

Open
josephggd wants to merge 1 commit intomainfrom
snyk-upgrade-d9059eea95862a8b1db3127a6d4f73a6
Open

[Snyk] Upgrade org.springframework.boot:spring-boot-starter-web from 3.3.2 to 3.5.6#3
josephggd wants to merge 1 commit intomainfrom
snyk-upgrade-d9059eea95862a8b1db3127a6d4f73a6

Conversation

@josephggd
Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to upgrade org.springframework.boot:spring-boot-starter-web from 3.3.2 to 3.5.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 29 versions ahead of your current version.

  • The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Path Equivalence
SNYK-JAVA-ORGAPACHETOMCATEMBED-9396739
150 Mature
high severity Improper Cleanup on Thrown Exception
SNYK-JAVA-ORGAPACHETOMCATEMBED-9905132
150 Mature
high severity Relative Path Traversal
SNYK-JAVA-ORGSPRINGFRAMEWORK-12008931
150 No Known Exploit
high severity Incorrect Authorization
SNYK-JAVA-ORGSPRINGFRAMEWORK-12817817
150 No Known Exploit
high severity Path Traversal
SNYK-JAVA-ORGSPRINGFRAMEWORK-7945490
150 Proof of Concept
high severity Path Traversal
SNYK-JAVA-ORGSPRINGFRAMEWORK-8230373
150 Proof of Concept
high severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGAPACHETOMCATEMBED-10365122
150 No Known Exploit
high severity Integer Overflow or Wraparound
SNYK-JAVA-ORGAPACHETOMCATEMBED-10674391
150 No Known Exploit
high severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGAPACHETOMCATEMBED-10676855
150 No Known Exploit
high severity Improper Resource Shutdown or Release
SNYK-JAVA-ORGAPACHETOMCATEMBED-11799152
150 No Known Exploit
medium severity Improper Neutralization
SNYK-JAVA-ORGAPACHETOMCATEMBED-9905136
150 Proof of Concept
medium severity HTTP Response Splitting
SNYK-JAVA-ORGSPRINGFRAMEWORK-10345766
150 No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-ORGSPRINGFRAMEWORK-7687447
150 No Known Exploit
medium severity Improper Handling of Case Sensitivity
SNYK-JAVA-ORGAPACHETOMCATEMBED-10264469
150 No Known Exploit
medium severity Authentication Bypass Using an Alternate Path or Channel
SNYK-JAVA-ORGAPACHETOMCATEMBED-10365310
150 No Known Exploit
medium severity Session Fixation
SNYK-JAVA-ORGAPACHETOMCATEMBED-11798986
150 No Known Exploit
low severity Improper Handling of Case Sensitivity
SNYK-JAVA-ORGSPRINGFRAMEWORK-10176071
150 No Known Exploit
low severity Improper Handling of Case Sensitivity
SNYK-JAVA-ORGSPRINGFRAMEWORK-8230364
150 No Known Exploit
low severity Improper Handling of Case Sensitivity
SNYK-JAVA-ORGSPRINGFRAMEWORK-8230366
150 No Known Exploit
low severity Improper Handling of Case Sensitivity
SNYK-JAVA-ORGSPRINGFRAMEWORK-8230365
150 No Known Exploit
low severity Improper Handling of Case Sensitivity
SNYK-JAVA-ORGSPRINGFRAMEWORK-8230368
150 No Known Exploit
critical severity Uncaught Exception
SNYK-JAVA-ORGAPACHETOMCATEMBED-8383920
150 Proof of Concept
critical severity Time-of-check Time-of-use (TOCTOU) Race Condition
SNYK-JAVA-ORGAPACHETOMCATEMBED-8523186
150 Proof of Concept
critical severity Time-of-check Time-of-use (TOCTOU) Race Condition
SNYK-JAVA-ORGAPACHETOMCATEMBED-8547999
150 No Known Exploit

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

…3.2 to 3.5.6

Snyk has created this PR to upgrade org.springframework.boot:spring-boot-starter-web from 3.3.2 to 3.5.6.

See this package in maven:
org.springframework.boot:spring-boot-starter-web

See this project in Snyk:
https://app.snyk.io/org/outbound-oss/project/6cb05cd4-a55a-480e-8a04-46d0d44965a1?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants