Skip to content

[Snyk] Security upgrade ch.qos.logback:logback-classic from 1.2.3 to 1.5.25 - #5

Open
casianaoprut wants to merge 1 commit into
masterfrom
snyk-fix-af3ccbd5c4e343cb01c67b9be681a23c
Open

[Snyk] Security upgrade ch.qos.logback:logback-classic from 1.2.3 to 1.5.25#5
casianaoprut wants to merge 1 commit into
masterfrom
snyk-fix-af3ccbd5c4e343cb01c67b9be681a23c

Conversation

@casianaoprut

Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to fix 10 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

  • pom.xml

Vulnerabilities that will be fixed with an upgrade:

Issue Score Upgrade
high severity Denial of Service (DoS)
SNYK-JAVA-CHQOSLOGBACK-6094942
  569   ch.qos.logback:logback-classic:
1.2.3 -> 1.5.25
No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-CHQOSLOGBACK-6094943
  569   ch.qos.logback:logback-classic:
1.2.3 -> 1.5.25
No Known Exploit
high severity Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JAVA-CHQOSLOGBACK-6097492
  569   ch.qos.logback:logback-classic:
1.2.3 -> 1.5.25
No Known Exploit
high severity Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JAVA-CHQOSLOGBACK-6097493
  569   ch.qos.logback:logback-classic:
1.2.3 -> 1.5.25
No Known Exploit
medium severity External Initialization of Trusted Variables or Data Stores
SNYK-JAVA-CHQOSLOGBACK-13169722
  509   ch.qos.logback:logback-classic:
1.2.3 -> 1.5.25
No Known Exploit
medium severity Improper Neutralization of Special Elements
SNYK-JAVA-CHQOSLOGBACK-8539866
  509   ch.qos.logback:logback-classic:
1.2.3 -> 1.5.25
No Known Exploit
medium severity Improper Neutralization of Special Elements
SNYK-JAVA-CHQOSLOGBACK-8539867
  509   ch.qos.logback:logback-classic:
1.2.3 -> 1.5.25
No Known Exploit
medium severity Insufficient Hostname Verification
SNYK-JAVA-CHQOSLOGBACK-1726923
  454   ch.qos.logback:logback-classic:
1.2.3 -> 1.5.25
No Known Exploit
low severity External Initialization of Trusted Variables or Data Stores
SNYK-JAVA-CHQOSLOGBACK-15062482
  376   ch.qos.logback:logback-classic:
1.2.3 -> 1.5.25
No Known Exploit
low severity Server-side Request Forgery (SSRF)
SNYK-JAVA-CHQOSLOGBACK-8539865
  334   ch.qos.logback:logback-classic:
1.2.3 -> 1.5.25
No Known Exploit

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Insufficient Hostname Verification
🦉 Denial of Service (DoS)
🦉 Server-side Request Forgery (SSRF)

@changeset-bot

changeset-bot Bot commented Feb 1, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 3bd9517

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants