Skip to content

[Snyk] Fix for 48 vulnerabilities#5

Open
soumodas wants to merge 1 commit intomasterfrom
snyk-fix-193dc13a7fd75cc4edd3bcd4f235e106
Open

[Snyk] Fix for 48 vulnerabilities#5
soumodas wants to merge 1 commit intomasterfrom
snyk-fix-193dc13a7fd75cc4edd3bcd4f235e106

Conversation

@soumodas
Copy link
Copy Markdown
Owner

@soumodas soumodas commented Oct 7, 2022

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • pom.xml

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity
high severity 599/1000
Why? Has a fix available, CVSS 7.7
Deserialization of Untrusted Data
SNYK-JAVA-COMGOOGLECODEGSON-1730327
com.google.code.gson:gson:
2.8.1 -> 2.8.9
No No Known Exploit
low severity 399/1000
Why? Has a fix available, CVSS 3.7
Information Exposure
SNYK-JAVA-COMMONSCODEC-561518
commons-codec:commons-codec:
1.10 -> 1.13
No No Known Exploit
critical severity 919/1000
Why? Mature exploit, Has a fix available, CVSS 9.8
Deserialization of Untrusted Data
SNYK-JAVA-COMMONSCOLLECTIONS-30078
org.hibernate:hibernate-core:
3.3.1.GA -> 5.4.24.Final
Yes Mature
medium severity 601/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.6
Deserialization of Untrusted Data
SNYK-JAVA-COMMONSCOLLECTIONS-472711
org.hibernate:hibernate-core:
3.3.1.GA -> 5.4.24.Final
Yes Proof of Concept
critical severity 704/1000
Why? Has a fix available, CVSS 9.8
Arbitrary Code Execution
SNYK-JAVA-COMMONSFILEUPLOAD-30401
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
No No Known Exploit
medium severity 651/1000
Why? Mature exploit, Has a fix available, CVSS 5.3
Directory Traversal
SNYK-JAVA-COMMONSIO-1277109
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
Yes Mature
medium severity 529/1000
Why? Has a fix available, CVSS 6.3
Privilege Escalation
SNYK-JAVA-MYSQL-174574
mysql:mysql-connector-java:
5.1.42 -> 8.0.28
Yes No Known Exploit
medium severity 616/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
XML External Entity (XXE) Injection
SNYK-JAVA-MYSQL-1766958
mysql:mysql-connector-java:
5.1.42 -> 8.0.28
Yes Proof of Concept
medium severity 544/1000
Why? Has a fix available, CVSS 6.6
Improper Authorization
SNYK-JAVA-MYSQL-2386864
mysql:mysql-connector-java:
5.1.42 -> 8.0.28
Yes No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8
Access Control Bypass
SNYK-JAVA-MYSQL-451464
mysql:mysql-connector-java:
5.1.42 -> 8.0.28
Yes No Known Exploit
critical severity 944/1000
Why? Currently trending on Twitter, Mature exploit, Has a fix available, CVSS 10
Remote Code Execution (RCE)
SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720
org.apache.logging.log4j:log4j-core:
2.3 -> 2.13.2
No Mature
critical severity 771/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 9
Remote Code Execution (RCE)
SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2320014
org.apache.logging.log4j:log4j-core:
2.3 -> 2.13.2
No Proof of Concept
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2321524
org.apache.logging.log4j:log4j-core:
2.3 -> 2.13.2
No Proof of Concept
medium severity 651/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.6
Arbitrary Code Execution
SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2327339
org.apache.logging.log4j:log4j-core:
2.3 -> 2.13.2
No Proof of Concept
critical severity 876/1000
Why? Mature exploit, Has a fix available, CVSS 9.8
Deserialization of Untrusted Data
SNYK-JAVA-ORGAPACHELOGGINGLOG4J-31409
org.apache.logging.log4j:log4j-core:
2.3 -> 2.13.2
No Mature
low severity 399/1000
Why? Has a fix available, CVSS 3.7
Man-in-the-Middle (MitM)
SNYK-JAVA-ORGAPACHELOGGINGLOG4J-567761
org.apache.logging.log4j:log4j-core:
2.3 -> 2.13.2
No No Known Exploit
critical severity 919/1000
Why? Mature exploit, Has a fix available, CVSS 9.8
Remote Code Execution (RCE)
SNYK-JAVA-ORGAPACHESTRUTS-1049003
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin:
2.5.1 -> 5.0.0
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
Yes Mature
high severity 726/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Remote Code Execution (RCE)
SNYK-JAVA-ORGAPACHESTRUTS-2635340
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin:
2.5.1 -> 5.0.0
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
Yes Proof of Concept
critical severity 929/1000
Why? Mature exploit, Has a fix available, CVSS 10
Arbitrary Code Execution
SNYK-JAVA-ORGAPACHESTRUTS-30207
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin:
2.5.1 -> 5.0.0
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No Mature
critical severity 704/1000
Why? Has a fix available, CVSS 9.8
Directory Traversal
SNYK-JAVA-ORGAPACHESTRUTS-30778
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No No Known Exploit
high severity 834/1000
Why? Mature exploit, Has a fix available, CVSS 8.1
Arbitrary Command Execution
SNYK-JAVA-ORGAPACHESTRUTS-31495
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin:
2.5.1 -> 5.0.0
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No Mature
high severity 589/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHESTRUTS-31500
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin:
2.5.1 -> 5.0.0
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHESTRUTS-31501
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin:
2.5.1 -> 5.0.0
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHESTRUTS-31502
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin:
2.5.1 -> 5.0.0
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No No Known Exploit
critical severity 876/1000
Why? Mature exploit, Has a fix available, CVSS 9.8
Arbitrary Code Execution
SNYK-JAVA-ORGAPACHESTRUTS-31503
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin:
2.5.1 -> 5.0.0
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No Mature
high severity 834/1000
Why? Mature exploit, Has a fix available, CVSS 8.1
Remote Code Execution
SNYK-JAVA-ORGAPACHESTRUTS-32477
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin:
2.5.1 -> 5.0.0
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
Yes Mature
critical severity 876/1000
Why? Mature exploit, Has a fix available, CVSS 9.8
Remote Code Execution (RCE)
SNYK-JAVA-ORGAPACHESTRUTS-608097
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin:
2.5.1 -> 5.0.0
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
Yes Mature
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHESTRUTS-608098
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin:
2.5.1 -> 5.0.0
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
Yes Proof of Concept
high severity 654/1000
Why? Has a fix available, CVSS 8.8
Unrestricted Upload of File with Dangerous Type
SNYK-JAVA-ORGAPACHESTRUTS-609765
org.apache.struts:struts2-config-browser-plugin:
2.3.30 -> 2.5.30
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No No Known Exploit
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Server-side Template Injection (SSTI)
SNYK-JAVA-ORGFREEMARKER-1076795
org.apache.struts:struts2-core:
2.3.30 -> 6.0.0
No Proof of Concept
high severity 635/1000
Why? Has a fix available, CVSS 8.2
SQL Injection
SNYK-JAVA-ORGHIBERNATE-1041788
org.hibernate:hibernate-core:
3.3.1.GA -> 5.4.24.Final
org.hibernate:hibernate-entitymanager:
3.4.0.GA -> 5.4.24.Final
Yes No Known Exploit
high severity 619/1000
Why? Has a fix available, CVSS 8.1
SQL Injection
SNYK-JAVA-ORGHIBERNATE-584563
org.hibernate:hibernate-core:
3.3.1.GA -> 5.4.24.Final
org.hibernate:hibernate-entitymanager:
3.4.0.GA -> 5.4.24.Final
Yes No Known Exploit
medium severity 429/1000
Why? Has a fix available, CVSS 4.3
Improper Output Neutralization for Logs
SNYK-JAVA-ORGSPRINGFRAMEWORK-2329097
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
org.springframework:spring-orm:
3.0.5.RELEASE -> 5.2.22.RELEASE
org.springframework:spring-tx:
3.0.5.RELEASE -> 5.2.22.RELEASE
Yes No Known Exploit
medium severity 429/1000
Why? Has a fix available, CVSS 4.3
Improper Input Validation
SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
org.springframework:spring-orm:
3.0.5.RELEASE -> 5.2.22.RELEASE
org.springframework:spring-tx:
3.0.5.RELEASE -> 5.2.22.RELEASE
Yes No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3
Denial of Service (DoS)
SNYK-JAVA-ORGSPRINGFRAMEWORK-2434828
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
Yes No Known Exploit
critical severity 919/1000
Why? Mature exploit, Has a fix available, CVSS 9.8
Remote Code Execution
SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
org.springframework:spring-orm:
3.0.5.RELEASE -> 5.2.22.RELEASE
org.springframework:spring-tx:
3.0.5.RELEASE -> 5.2.22.RELEASE
Yes Mature
low severity 506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
Improper Handling of Case Sensitivity
SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
org.springframework:spring-tx:
3.0.5.RELEASE -> 5.2.22.RELEASE
Yes Proof of Concept
medium severity 479/1000
Why? Has a fix available, CVSS 5.3
Denial of Service (DoS)
SNYK-JAVA-ORGSPRINGFRAMEWORK-2823313
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
org.springframework:spring-orm:
3.0.5.RELEASE -> 5.2.22.RELEASE
org.springframework:spring-tx:
3.0.5.RELEASE -> 5.2.22.RELEASE
Yes No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3
Expression Language Injection
SNYK-JAVA-ORGSPRINGFRAMEWORK-30157
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
org.springframework:spring-orm:
3.0.5.RELEASE -> 5.2.22.RELEASE
org.springframework:spring-tx:
3.0.5.RELEASE -> 5.2.22.RELEASE
No No Known Exploit
medium severity 529/1000
Why? Has a fix available, CVSS 6.3
XML External Entity (XXE) Injection
SNYK-JAVA-ORGSPRINGFRAMEWORK-30160
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No No Known Exploit
low severity 399/1000
Why? Has a fix available, CVSS 3.7
Cross-site Scripting (XSS)
SNYK-JAVA-ORGSPRINGFRAMEWORK-30161
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No No Known Exploit
medium severity 529/1000
Why? Has a fix available, CVSS 6.3
XML External Entity (XXE) Injection
SNYK-JAVA-ORGSPRINGFRAMEWORK-30162
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8
XML External Entity (XXE) Injection
SNYK-JAVA-ORGSPRINGFRAMEWORK-30163
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No No Known Exploit
medium severity 529/1000
Why? Has a fix available, CVSS 6.3
Access Restriction Bypass
SNYK-JAVA-ORGSPRINGFRAMEWORK-31324
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
org.springframework:spring-orm:
3.0.5.RELEASE -> 5.2.22.RELEASE
org.springframework:spring-tx:
3.0.5.RELEASE -> 5.2.22.RELEASE
No No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3
Directory Traversal
SNYK-JAVA-ORGSPRINGFRAMEWORK-31325
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
org.springframework:spring-orm:
3.0.5.RELEASE -> 5.2.22.RELEASE
org.springframework:spring-tx:
3.0.5.RELEASE -> 5.2.22.RELEASE
No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3
Expression Language Injection
SNYK-JAVA-ORGSPRINGFRAMEWORK-31329
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No No Known Exploit
medium severity 529/1000
Why? Has a fix available, CVSS 6.3
XML External Entity (XXE) Injection
SNYK-JAVA-ORGSPRINGFRAMEWORK-31330
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No No Known Exploit
medium severity 529/1000
Why? Has a fix available, CVSS 6.3
Cross-site Request Forgery (CSRF)
SNYK-JAVA-ORGSPRINGFRAMEWORK-31331
org.apache.struts:struts2-spring-plugin:
2.3.30 -> 6.0.0
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Deserialization of Untrusted Data
🦉 Deserialization of Untrusted Data
🦉 Deserialization of Untrusted Data
🦉 More lessons are available in Snyk Learn

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327
- https://snyk.io/vuln/SNYK-JAVA-COMMONSCODEC-561518
- https://snyk.io/vuln/SNYK-JAVA-COMMONSCOLLECTIONS-30078
- https://snyk.io/vuln/SNYK-JAVA-COMMONSCOLLECTIONS-472711
- https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-30401
- https://snyk.io/vuln/SNYK-JAVA-COMMONSIO-1277109
- https://snyk.io/vuln/SNYK-JAVA-MYSQL-174574
- https://snyk.io/vuln/SNYK-JAVA-MYSQL-1766958
- https://snyk.io/vuln/SNYK-JAVA-MYSQL-2386864
- https://snyk.io/vuln/SNYK-JAVA-MYSQL-451464
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2320014
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2321524
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2327339
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-31409
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-567761
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-1049003
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-2635340
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30207
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30778
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-31495
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-31500
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-31501
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-31502
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-31503
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-32477
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-608097
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-608098
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-609765
- https://snyk.io/vuln/SNYK-JAVA-ORGFREEMARKER-1076795
- https://snyk.io/vuln/SNYK-JAVA-ORGHIBERNATE-1041788
- https://snyk.io/vuln/SNYK-JAVA-ORGHIBERNATE-584563
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2329097
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2434828
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2823313
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-30157
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-30160
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-30161
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-30162
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-30163
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-31324
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-31325
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-31329
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-31330
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-31331
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants