Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: snyk-labs/java-goof
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: malcolmawsnyk/java-goof
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 6 commits
  • 3 files changed
  • 2 contributors

Commits on Jun 10, 2022

  1. fix: todolist-goof/Dockerfile to reduce vulnerabilities 

    The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN9-CURL-336351
- https://snyk.io/vuln/SNYK-DEBIAN9-DPKG-2847943
- https://snyk.io/vuln/SNYK-DEBIAN9-LIBIDN20-274945
- https://snyk.io/vuln/SNYK-DEBIAN9-LIBXML2-429367
- https://snyk.io/vuln/SNYK-DEBIAN9-OPENSSL-2807589
    @snyk-bot
    snyk-bot committed Jun 10, 2022
    Configuration menu
    Copy the full SHA
    d6ac6fa View commit details
    Browse the repository at this point in the history

  2. Merge pull request #1 from malcolmawsnyk/snyk-fix-b7d0aaeb9fcc72acc2f… 

    …ed2e87b3a893f

[Snyk] Security upgrade tomcat from 8.5.21 to 8.5.68
    @malcolmawsnyk
    malcolmawsnyk authored Jun 10, 2022
    Configuration menu
    Copy the full SHA
    b2dccae View commit details
    Browse the repository at this point in the history

  3. fix: upgrade org.zeroturnaround:zt-zip from 1.12 to 1.15 

    Snyk has created this PR to upgrade org.zeroturnaround:zt-zip from 1.12 to 1.15.

See this package in Maven Repository:
https://mvnrepository.com/artifact/org.zeroturnaround/zt-zip/

See this project in Snyk:
https://app.snyk.io/org/malcolm.aw/project/21965aa0-06ce-408f-9f11-c4bf05372c87?utm_source=github&utm_medium=referral&page=upgrade-pr
    @snyk-bot
    snyk-bot committed Jun 10, 2022
    Configuration menu
    Copy the full SHA
    e90105a View commit details
    Browse the repository at this point in the history

Commits on Jun 16, 2022

  1. Merge pull request #5 from malcolmawsnyk/snyk-upgrade-4a9846f321e6ebb… 

    …886022558ad611f45

[Snyk] Upgrade org.zeroturnaround:zt-zip from 1.12 to 1.15
    @malcolmawsnyk
    malcolmawsnyk authored Jun 16, 2022
    Configuration menu
    Copy the full SHA
    000c93a View commit details
    Browse the repository at this point in the history

Commits on Jul 5, 2022

  1. fix: log4shell-goof/log4shell-client/pom.xml to reduce vulnerabilities 

    The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720
    @snyk-bot
    snyk-bot committed Jul 5, 2022
    Configuration menu
    Copy the full SHA
    02c6f58 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #10 from malcolmawsnyk/snyk-fix-c915356d4a259db886… 

    …a621d7aa6dc1e6

[Snyk] Security upgrade org.apache.logging.log4j:log4j-core from 2.14.1 to 2.15.0
    @malcolmawsnyk
    malcolmawsnyk authored Jul 5, 2022
    Configuration menu
    Copy the full SHA
    f274d77 View commit details
    Browse the repository at this point in the history
Loading