Skip to content

[Snyk] Security upgrade org.apache.zookeeper:zookeeper from 3.4.10 to 3.7.2#18

Open
ecki wants to merge 1 commit intomaster-seeburgerfrom
snyk-fix-17e029e97b94af942f957b9c7e980905
Open

[Snyk] Security upgrade org.apache.zookeeper:zookeeper from 3.4.10 to 3.7.2#18
ecki wants to merge 1 commit intomaster-seeburgerfrom
snyk-fix-17e029e97b94af942f957b9c7e980905

Conversation

@ecki
Copy link
Member

@ecki ecki commented Oct 12, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • parent/pom.xml

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity
high severity 691/1000
Why? Recently disclosed, Has a fix available, CVSS 8.1
Authorization Bypass Through User-Controlled Key
SNYK-JAVA-ORGAPACHEZOOKEEPER-5961102
org.apache.zookeeper:zookeeper:
3.4.10 -> 3.7.2
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

@MrEasy MrEasy force-pushed the master-seeburger branch 2 times, most recently from 7fd0fdb to 7e4c457 Compare February 27, 2025 07:35
@MrEasy MrEasy force-pushed the master-seeburger branch from 9c21482 to cb58c7a Compare July 31, 2025 09:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants