[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.0 #3296

yurake · 2023-08-22T03:11:41Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- application/consumer-activemq-quarkus/pom.xml

Vulnerabilities that will be fixed

With an upgrade:

Priority Score (*)	Issue	Upgrade	Breaking Change	Exploit Maturity	Reachability
475/1000 Why? Has a fix available, CVSS 6.5	Denial of Service (DoS) SNYK-JAVA-IONETTY-5725787	`io.quarkiverse.artemis:quarkus-artemis-jms:` `2.1.1 -> 3.1.0`	Yes	No Known Exploit	No Path Found
335/1000 Why? Has a fix available, CVSS 3.7	Denial of Service (DoS) SNYK-JAVA-ORGGRAALVMSDK-5781367	`io.quarkiverse.artemis:quarkus-artemis-jms:` `2.1.1 -> 3.1.0`	Yes	No Known Exploit	No Path Found
335/1000 Why? Has a fix available, CVSS 3.7	Access Restriction Bypass SNYK-JAVA-ORGGRAALVMSDK-5781369	`io.quarkiverse.artemis:quarkus-artemis-jms:` `2.1.1 -> 3.1.0`	Yes	No Known Exploit	No Path Found
335/1000 Why? Has a fix available, CVSS 3.7	Information Exposure SNYK-JAVA-ORGGRAALVMSDK-5781371	`io.quarkiverse.artemis:quarkus-artemis-jms:` `2.1.1 -> 3.1.0`	Yes	No Known Exploit	No Path Found
335/1000 Why? Has a fix available, CVSS 3.7	Information Exposure SNYK-JAVA-ORGGRAALVMSDK-5781373	`io.quarkiverse.artemis:quarkus-artemis-jms:` `2.1.1 -> 3.1.0`	Yes	No Known Exploit	No Path Found
405/1000 Why? Has a fix available, CVSS 5.1	Improper Access Control SNYK-JAVA-ORGGRAALVMSDK-5781374	`io.quarkiverse.artemis:quarkus-artemis-jms:` `2.1.1 -> 3.1.0`	Yes	No Known Exploit	No Path Found
305/1000 Why? Has a fix available, CVSS 3.1	Access Restriction Bypass SNYK-JAVA-ORGGRAALVMSDK-5781378	`io.quarkiverse.artemis:quarkus-artemis-jms:` `2.1.1 -> 3.1.0`	Yes	No Known Exploit	No Path Found

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Access Restriction Bypass

…ilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-IONETTY-5725787 - https://snyk.io/vuln/SNYK-JAVA-ORGGRAALVMSDK-5781367 - https://snyk.io/vuln/SNYK-JAVA-ORGGRAALVMSDK-5781369 - https://snyk.io/vuln/SNYK-JAVA-ORGGRAALVMSDK-5781371 - https://snyk.io/vuln/SNYK-JAVA-ORGGRAALVMSDK-5781373 - https://snyk.io/vuln/SNYK-JAVA-ORGGRAALVMSDK-5781374 - https://snyk.io/vuln/SNYK-JAVA-ORGGRAALVMSDK-5781378

sonarcloud · 2023-08-22T03:12:07Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

codeclimate · 2023-08-22T03:12:32Z

Code Climate has analyzed commit 17f3560 and detected 0 issues on this pull request.

View more on Code Climate.

codecov · 2023-08-22T03:14:56Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 96.01%. Comparing base (8571a4b) to head (17f3560).
Report is 187 commits behind head on master.

Additional details and impacted files

@@              Coverage Diff              @@
##              master    #3296      +/-   ##
=============================================
- Coverage     100.00%   96.01%   -3.99%     
- Complexity         0       30      +30     
=============================================
  Files              8       58      +50     
  Lines             99      904     +805     
  Branches           2       28      +26     
=============================================
+ Hits              99      868     +769     
- Misses             0       30      +30     
- Partials           0        6       +6

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

sonarcloud · 2023-08-22T03:15:36Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

datadog-github-app-for-yurake · 2023-08-22T03:17:57Z

Datadog Report

All test runs 6b215f4 🔗

✅ 22 Total Test Services: 0 Failed, 0 with New Flaky, 22 Passed

Test Services

Service Name	Passed	Wall Time	Branch View
`consumer-hazelcast-quarkus`	4	1.57s	Link
`consumer-kafka-quarkus`	2	3.23s	Link
`consumer-rabbitmq-quarkus`	1	2.01s	Link
`consumer-redis-quarkus`	1	1.87s	Link
`converter-kafka-quarkus`	1	3.51s	Link
`converter-rabbitmq-quarkus`	1	2.4s	Link
`jaxrs-activemq-quarkus`	16	1.6s	Link
`jaxrs-cassandra-quarkus`	14	1.84s	Link
`jaxrs-grpc-quarkus`	2	3.33s	Link
`jaxrs-hazelcast-quarkus`	45	6.54s	Link

sonarcloud · 2023-08-22T03:20:19Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:20:23Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:20:46Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:20:50Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:20:50Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:21:11Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:21:24Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:21:25Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:21:33Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:21:50Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:24:18Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:24:22Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:24:23Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:24:33Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:24:40Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:24:54Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:25:45Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:26:31Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:27:53Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:28:14Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarcloud · 2023-08-22T03:29:06Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

pull-request-size bot added the size/XS label Aug 22, 2023

github-actions bot added quarkus someone for quarkus java Pull requests that update Java code labels Aug 22, 2023

yurake closed this Sep 15, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.0 #3296

[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.0 #3296

yurake commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

codeclimate bot commented Aug 22, 2023

codecov bot commented Aug 22, 2023 •

edited

Loading

sonarcloud bot commented Aug 22, 2023

datadog-github-app-for-yurake bot commented Aug 22, 2023 •

edited

Loading

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.0 #3296

[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.0 #3296

Conversation

yurake commented Aug 22, 2023

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:

sonarcloud bot commented Aug 22, 2023

codeclimate bot commented Aug 22, 2023

codecov bot commented Aug 22, 2023 • edited Loading

Codecov Report

sonarcloud bot commented Aug 22, 2023

datadog-github-app-for-yurake bot commented Aug 22, 2023 • edited Loading

Datadog Report

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

sonarcloud bot commented Aug 22, 2023

codecov bot commented Aug 22, 2023 •

edited

Loading

datadog-github-app-for-yurake bot commented Aug 22, 2023 •

edited

Loading