Skip to content

Commit 95b83ff

Browse files
renovate-botrenovate-bot
authored
fix(deps): update dependency commons-fileupload:commons-fileupload to v1.5 [security] (GoogleCloudPlatform#1205)
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [commons-fileupload:commons-fileupload](https://commons.apache.org/proper/commons-fileupload/) ([source](https://gitbox.apache.org/repos/asf?p=commons-fileupload.git)) | `1.4` -> `1.5` | [![age](https://badges.renovateapi.com/packages/maven/commons-fileupload:commons-fileupload/1.5/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/maven/commons-fileupload:commons-fileupload/1.5/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/maven/commons-fileupload:commons-fileupload/1.5/compatibility-slim/1.4)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/maven/commons-fileupload:commons-fileupload/1.5/confidence-slim/1.4)](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2023-24998](https://nvd.nist.gov/vuln/detail/CVE-2023-24998) Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/GoogleCloudPlatform/getting-started-java). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4xMjUuMSIsInVwZGF0ZWRJblZlciI6IjM0LjEyNS4xIn0=-->
1 parent c4a3027 commit 95b83ff

3 files changed

Lines changed: 3 additions & 3 deletions

File tree

‎bookshelf-standard/3-binary-data/pom.xml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -130,7 +130,7 @@ Copyright 2016 Google Inc.
130130
<dependency> <!-- http://commons.apache.org/proper/commons-fileupload/ -->
131131
<groupId>commons-fileupload</groupId>
132132
<artifactId>commons-fileupload</artifactId>
133-
<version>1.4</version>
133+
<version>1.5</version>
134134
</dependency>
135135
</dependencies>
136136

‎bookshelf-standard/4-auth/pom.xml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -131,7 +131,7 @@ Copyright 2016 Google Inc.
131131
<dependency> <!-- http://commons.apache.org/proper/commons-fileupload/ -->
132132
<groupId>commons-fileupload</groupId>
133133
<artifactId>commons-fileupload</artifactId>
134-
<version>1.4</version>
134+
<version>1.5</version>
135135
</dependency>
136136
</dependencies>
137137

‎bookshelf-standard/5-logging/pom.xml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -131,7 +131,7 @@ Copyright 2016 Google Inc.
131131
<dependency> <!-- http://commons.apache.org/proper/commons-fileupload/ -->
132132
<groupId>commons-fileupload</groupId>
133133
<artifactId>commons-fileupload</artifactId>
134-
<version>1.4</version>
134+
<version>1.5</version>
135135
</dependency>
136136
</dependencies>
137137

0 commit comments

Comments
 (0)