Skip to content

[Snyk] Fix for 47 vulnerabilities#6

Open
DariusZdroba wants to merge 1 commit intomainfrom
snyk-fix-fd820a10e6b2a55a45093bf0d3781c25
Open

[Snyk] Fix for 47 vulnerabilities#6
DariusZdroba wants to merge 1 commit intomainfrom
snyk-fix-fd820a10e6b2a55a45093bf0d3781c25

Conversation

@DariusZdroba
Copy link
Copy Markdown
Owner

@DariusZdroba DariusZdroba commented Jul 11, 2025

snyk-top-banner

Snyk has created this PR to fix 47 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

  • todolist-goof/pom.xml

Vulnerabilities that will be fixed with an upgrade:

Issue Score Upgrade
critical severity Arbitrary Code Execution
SNYK-JAVA-ORGAPACHESTRUTS-30207		   712   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Mature
critical severity Remote Code Execution (RCE)
SNYK-JAVA-ORGAPACHESTRUTS-1049003		   691   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Mature
critical severity Arbitrary Command Execution
SNYK-JAVA-ORGAPACHESTRUTS-30772		   691   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Mature
critical severity Remote Code Execution (RCE)
SNYK-JAVA-ORGAPACHESTRUTS-6102825		   691   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Mature
high severity Command Injection
SNYK-JAVA-ORGAPACHESTRUTS-30770		   670   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Mature
high severity Arbitrary Command Execution
SNYK-JAVA-ORGAPACHESTRUTS-31495		   670   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Mature
high severity Remote Code Execution
SNYK-JAVA-ORGAPACHESTRUTS-32477		   670   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Mature
high severity Command Injection
SNYK-JAVA-ORGAPACHESTRUTSXWORK-451611		   670   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Mature
critical severity Arbitrary Code Execution
SNYK-JAVA-ORGAPACHESTRUTS-31503		   588   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Mature
critical severity Remote Code Execution (RCE)
SNYK-JAVA-ORGAPACHESTRUTS-608097		   586   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Mature
critical severity Remote Code Execution (RCE)
SNYK-JAVA-ORGAPACHESTRUTS-8496612		   500   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Major version upgrade Proof of Concept
high severity Remote Code Execution (RCE)
SNYK-JAVA-ORGAPACHESTRUTS-2635340		   467   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Proof of Concept
critical severity Arbitrary Code Execution
SNYK-JAVA-COMMONSFILEUPLOAD-30401		   337   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
critical severity Arbitrary Code Execution
SNYK-JAVA-ORGAPACHESTRUTS-30771		   258   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Improper Input Validation
SNYK-JAVA-ORGAPACHESTRUTSXWORK-30799		   251   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Server-side Template Injection (SSTI)
SNYK-JAVA-ORGFREEMARKER-1076795		   224   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Proof of Concept
critical severity Directory Traversal
SNYK-JAVA-ORGAPACHESTRUTS-30778		   216   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-COMMONSFILEUPLOAD-3326457		   210   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Major version upgrade Proof of Concept
critical severity Improper Action Name Cleanup
SNYK-JAVA-ORGAPACHESTRUTS-451610		   200   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-COMMONSFILEUPLOAD-30082		   181   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Improper Input Validation
SNYK-JAVA-ORGAPACHESTRUTSXWORK-5811864		   176   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Arbitrary Code Execution
SNYK-JAVA-ORGAPACHESTRUTSXWORK-30803		   173   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Unrestricted Upload of File with Dangerous Type
SNYK-JAVA-ORGAPACHESTRUTS-609765		   171   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-ORGAPACHESTRUTS-608098		   166   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Proof of Concept
high severity Cross-site Request Forgery (CSRF)
SNYK-JAVA-ORGAPACHESTRUTS-30774		   150   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Access Restriction Bypass
SNYK-JAVA-ORGAPACHESTRUTS-30775		   147   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-ORGAPACHESTRUTS-31500		   135   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-ORGAPACHESTRUTS-31502		   134   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-ORGAPACHESTRUTS-31501		   132   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Access Restriction Bypass
SNYK-JAVA-ORGAPACHESTRUTS-30776		   130   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Access Restriction Bypass
SNYK-JAVA-ORGAPACHESTRUTSXWORK-30802		   130   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
medium severity HTTP Response Splitting
SNYK-JAVA-ORGSPRINGFRAMEWORK-10345766		   129   org.springframework:spring-web:
6.1.14 -> 6.1.21
No Known Exploit
high severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-COMMONSFILEUPLOAD-10363252		   124   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Major version upgrade No Known Exploit
high severity Manipulation of Struts' internals
SNYK-JAVA-ORGAPACHESTRUTS-30060		   119   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Parameter Alteration
SNYK-JAVA-ORGAPACHESTRUTSXWORK-30798		   119   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
high severity Insecure Defaults
SNYK-JAVA-ORGAPACHESTRUTSXWORK-474418		   115   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
medium severity Directory Traversal
SNYK-JAVA-COMMONSIO-1277109		   86   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Major version upgrade Mature
medium severity Information Exposure
SNYK-JAVA-COMMONSFILEUPLOAD-31540		   81   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
medium severity Cross-site Scripting (XSS)
SNYK-JAVA-ORGAPACHESTRUTSXWORK-30800		   74   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
medium severity Cross-site Scripting (XSS)
SNYK-JAVA-ORGAPACHESTRUTS-30773		   70   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JAVA-ORGAPACHESTRUTS-460223		   53   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JAVA-ORGAPACHESTRUTSXWORK-30804		   53   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
medium severity Uncontrolled Resource Consumption
SNYK-JAVA-COMMONSIO-8161190		   49   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
Major version upgrade No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-OGNL-30474		   48   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
medium severity Improper Input Validation
SNYK-JAVA-ORGAPACHESTRUTSXWORK-30801		   48   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
medium severity Denial of Service
SNYK-JAVA-ORGAPACHESTRUTS-6100744		   45   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGAPACHESTRUTS-5707101		   35   org.apache.struts:struts2-core:
2.3.20 -> 7.0.0
No Known Exploit

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling
🦉 Denial of Service (DoS)
🦉 Arbitrary Code Execution
🦉 More lessons are available in Snyk Learn

@snyk-bot
fix: todolist-goof/pom.xml to reduce vulnerabilities
5cc0697 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30207
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-1049003
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30772
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-6102825
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30770
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-31495
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-32477
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTSXWORK-451611
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-31503
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-608097
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-8496612
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-2635340
- https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-30401
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30771
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTSXWORK-30799
- https://snyk.io/vuln/SNYK-JAVA-ORGFREEMARKER-1076795
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30778
- https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-3326457
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-451610
- https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-30082
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTSXWORK-5811864
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTSXWORK-30803
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-609765
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-608098
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30774
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30775
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-31500
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-31502
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-31501
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30776
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTSXWORK-30802
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-10345766
- https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-10363252
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30060
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTSXWORK-30798
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTSXWORK-474418
- https://snyk.io/vuln/SNYK-JAVA-COMMONSIO-1277109
- https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-31540
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTSXWORK-30800
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30773
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-460223
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTSXWORK-30804
- https://snyk.io/vuln/SNYK-JAVA-COMMONSIO-8161190
- https://snyk.io/vuln/SNYK-JAVA-OGNL-30474
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTSXWORK-30801
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-6100744
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-5707101
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@DariusZdroba @snyk-bot