Skip to content

Update dependency com.thoughtworks.xstream:xstream to v1.4.20#44

Open
dev-mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/com.thoughtworks.xstream-xstream-1.x
Open

Update dependency com.thoughtworks.xstream:xstream to v1.4.20#44
dev-mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/com.thoughtworks.xstream-xstream-1.x

Conversation

@dev-mend-for-github-com
Copy link
Copy Markdown
Contributor

@dev-mend-for-github-com dev-mend-for-github-com bot commented Feb 5, 2025

This PR contains the following updates:

Package Type Update Change
com.thoughtworks.xstream:xstream (source) compile patch 1.4.51.4.20

By merging this PR, the issue #4 will be automatically resolved and closed:

Severity CVSS Score Vulnerability Reachability
Critical Critical 9.8 CVE-2013-7285
High High 8.5 CVE-2021-39139
High High 8.5 CVE-2021-39141
High High 8.5 CVE-2021-39144
High High 8.5 CVE-2021-39145
High High 8.5 CVE-2021-39146
High High 8.5 CVE-2021-39147
High High 8.5 CVE-2021-39148
High High 8.5 CVE-2021-39149
High High 8.5 CVE-2021-39150
High High 8.5 CVE-2021-39151
High High 8.5 CVE-2021-39152
High High 8.5 CVE-2021-39153
High High 8.5 CVE-2021-39154
High High 8.2 CVE-2022-41966
High High 7.5 CVE-2021-21341
High High 7.3 CVE-2019-10173
Medium Medium 6.5 CVE-2021-39140
Medium Medium 6.5 CVE-2022-40151
Medium Medium 6.1 CVE-2021-21346
Medium Medium 6.1 CVE-2021-21347
Medium Medium 6.1 CVE-2021-21349
Medium Medium 5.8 CVE-2021-21345
Medium Medium 5.4 CVE-2021-21351
Medium Medium 5.3 CVE-2021-21342
Medium Medium 5.3 CVE-2021-21343
Medium Medium 5.3 CVE-2021-21348
Medium Medium 5.3 CVE-2021-21350

  • If you want to rebase/retry this PR, check this box

@dev-mend-for-github-com dev-mend-for-github-com bot added the security fix Security fix generated by Mend label Feb 5, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants