Skip to content

Update dependency com.thoughtworks.xstream:xstream to v1.4.20#23

Open
mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/com.thoughtworks.xstream-xstream-1.x
Open

Update dependency com.thoughtworks.xstream:xstream to v1.4.20#23
mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/com.thoughtworks.xstream-xstream-1.x

Conversation

@mend-for-github-com
Copy link

@mend-for-github-com mend-for-github-com bot commented Aug 14, 2023

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
com.thoughtworks.xstream:xstream (source) 1.4.5 -> 1.4.20 age adoption passing confidence

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE Reachability
Critical Critical 9.9 CVE-2021-21345

Reachable

Critical Critical 9.8 CVE-2013-7285

Reachable

Critical Critical 9.8 CVE-2021-21344

Reachable

Critical Critical 9.8 CVE-2021-21346

Reachable

Critical Critical 9.8 CVE-2021-21347

Reachable

Critical Critical 9.8 CVE-2021-21350

Reachable

Critical Critical 9.1 CVE-2021-21342

Reachable

Critical Critical 9.1 CVE-2021-21351

Reachable

High High 8.8 CVE-2020-26217

Reachable

High High 8.8 CVE-2021-29505

Reachable

High High 8.8 CVE-2021-39139

Unreachable

High High 8.6 CVE-2021-21349

Reachable

High High 8.5 CVE-2021-39141

Unreachable

High High 8.5 CVE-2021-39144

Reachable

High High 8.5 CVE-2021-39145

Reachable

High High 8.5 CVE-2021-39146

Reachable

High High 8.5 CVE-2021-39147

Reachable

High High 8.5 CVE-2021-39148

Reachable

High High 8.5 CVE-2021-39149

Reachable

High High 8.5 CVE-2021-39150

Unreachable

High High 8.5 CVE-2021-39151

Reachable

High High 8.5 CVE-2021-39152

Reachable

High High 8.5 CVE-2021-39153

Reachable

High High 8.5 CVE-2021-39154

Reachable

High High 7.7 CVE-2020-26258

Reachable

High High 7.5 CVE-2021-21341

Reachable

High High 7.5 CVE-2021-21343

Reachable

High High 7.5 CVE-2021-21348

Reachable

High High 7.5 CVE-2021-43859

Reachable

High High 7.5 CVE-2022-40151
High High 7.5 CVE-2022-41966

Reachable

Medium Medium 6.8 CVE-2020-26259

Reachable

Medium Medium 6.3 CVE-2021-39140

Reachable


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Aug 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants