azure-sdk-for-java

[Snyk] Security upgrade org.springframework.cloud:spring-cloud-stream from 4.1.3 to 4.2.1

#499

Open

Snyk has created this PR to fix 3 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• sdk/spring/spring-cloud-azure-stream-binder-servicebus-core/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Server-side Request Forgery (SSRF) SNYK-JAVA-CHQOSLOGBACK-8539865	76	org.springframework.cloud:spring-cloud-stream: 4.1.3 -> 4.2.1 No Path Found No Known Exploit
	Improper Neutralization of Special Elements SNYK-JAVA-CHQOSLOGBACK-8539866	61	org.springframework.cloud:spring-cloud-stream: 4.1.3 -> 4.2.1 No Path Found No Known Exploit
	Improper Neutralization of Special Elements SNYK-JAVA-CHQOSLOGBACK-8539867	61	org.springframework.cloud:spring-cloud-stream: 4.1.3 -> 4.2.1 No Path Found No Known Exploit

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)

Review changes with  

Changed Files

File	Status
sdk/spring/spring-cloud-azure-stream-binder-servicebus-core/pom.xml	0% smaller

⛔ Snyk checks have failed. 3 issues have been found so far.

Icon	Severity	Issues
	Critical	0
	High	3
	Medium	0
	Low	0

⛔ security/snyk check is complete. 3 issues have been found. (View Details)

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.