Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency org.apache.struts:struts2-core to v6 #10

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dev-mend-for-github-com[bot]
Copy link
Contributor

@dev-mend-for-github-com dev-mend-for-github-com bot commented Dec 15, 2024

This PR contains the following updates:

Package Type Update Change
org.apache.struts:struts2-core (source) compile major 2.3.20 -> 6.1.2

By merging this PR, the issue #4 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 9.3 CVE-2016-1000031
Critical Critical 9.3 CVE-2016-3082
Critical Critical 9.3 CVE-2016-3087
Critical Critical 9.3 CVE-2016-4436
Critical Critical 9.3 CVE-2016-6795
Critical Critical 9.3 CVE-2017-12611
Critical Critical 9.3 CVE-2020-17530
Critical Critical 9.2 CVE-2016-3081
Critical Critical 9.2 CVE-2017-5638
Critical Critical 9.2 CVE-2018-11776
Critical Critical 9.2 CVE-2019-0230
High High 8.7 CVE-2015-5209
High High 8.7 CVE-2015-5209
High High 8.7 CVE-2016-0785
High High 8.7 CVE-2016-3092
High High 8.7 CVE-2016-4430
High High 8.7 CVE-2016-4431
High High 8.7 CVE-2016-4433
High High 8.7 CVE-2016-4433
High High 8.7 CVE-2016-4461
High High 8.7 CVE-2017-9787
High High 8.7 CVE-2017-9787
High High 8.7 CVE-2017-9804
High High 8.7 CVE-2017-9804
High High 8.7 CVE-2019-0233
High High 8.7 CVE-2023-24998
High High 7.5 WS-2014-0034
Medium Medium 6.9 CVE-2016-3093
Medium Medium 6.9 CVE-2016-3093
Medium Medium 6.9 CVE-2016-4465
Medium Medium 6.9 CVE-2016-4465
Medium Medium 6.3 CVE-2015-1831
Medium Medium 6.3 CVE-2021-29425
Medium Medium 5.3 CVE-2015-2992
Medium Medium 5.3 CVE-2016-2162
Medium Medium 5.3 CVE-2016-4003

  • If you want to rebase/retry this PR, check this box

@dev-mend-for-github-com dev-mend-for-github-com bot added the security fix Security fix generated by Mend label Dec 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants