JavaCodeAudit icon indicating copy to clipboard operation
JavaCodeAudit copied to clipboard

Getting started with java code auditing 代码审计入门的小项目

Results 18 JavaCodeAudit issues
Sort by recently updated
recently updated
newest added

Bumps [spring-webmvc](https://github.com/spring-projects/spring-framework) from 4.2.6.RELEASE to 5.3.18. Release notes Sourced from spring-webmvc's releases. v5.3.18 :star: New Features Restrict access to property paths on Class references #28261 Introduce cancel(boolean mayInterruptIfRunning) in ScheduledTask...

dependencies

Bumps [shiro-web](https://github.com/apache/shiro) from 1.3.2 to 1.7.1. Changelog Sourced from shiro-web's changelog. 1.7.1 ########################################################### Bug [SHIRO-797] - Shiro 1.7.0 is lower than using springboot version 2.0.7 dependency error ########################################################### 1.7.0 ###########################################################...

dependencies

Bumps [jsoup](https://github.com/jhy/jsoup) from 1.9.2 to 1.15.3. Release notes Sourced from jsoup's releases. jsoup 1.15.3 jsoup 1.15.3 is out now, and includes a security fix for potential XSS attacks, along with...

dependencies
java

Bumps commons-fileupload from 1.3.1 to 1.5. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commons-fileupload:commons-fileupload&package-manager=maven&previous-version=1.3.1&new-version=1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependencies
java

Bumps [spring-webmvc](https://github.com/spring-projects/spring-framework) from 4.2.6.RELEASE to 5.2.20.RELEASE. Release notes Sourced from spring-webmvc's releases. v5.2.20.RELEASE :star: New Features Restrict access to property paths on Class references #28262 Improve diagnostics in SpEL for...

dependencies
java

Bumps [spring-web](https://github.com/spring-projects/spring-framework) from 4.2.6.RELEASE to 6.0.0. Release notes Sourced from spring-web's releases. v6.0.0 See What's New in Spring Framework 6.x and Upgrading to Spring Framework 6.x for upgrade instructions and...

dependencies
java

Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.5.1 to 2.12.7.1. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.fasterxml.jackson.core:jackson-databind&package-manager=maven&previous-version=2.5.1&new-version=2.12.7.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependencies
java

Bumps [shiro-core](https://github.com/apache/shiro) from 1.3.2 to 1.10.0. Changelog Sourced from shiro-core's changelog. Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed...

dependencies
java