biubiu issues

Results 18 biubiu issues

Sort by recently updated

Bump struts2-core from 2.3.34 to 2.5.30

Bumps [struts2-core](https://github.com/apache/struts) from 2.3.34 to 2.5.30. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.struts:struts2-core&package-manager=maven&previous-version=2.3.34&new-version=2.5.30)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

dependencies

Bump hibernate-core from 4.3.8.Final to 5.4.24.Final

Bumps [hibernate-core](https://github.com/hibernate/hibernate-orm) from 4.3.8.Final to 5.4.24.Final. Release notes Sourced from hibernate-core's releases. Hibernate ORM 5.2.0 5.2.0 includes many improvements and bug-fixes. For a complete list of changes, see https://hibernate.atlassian.net/projects/HHH/versions/23150/tab/release-report-done. Many...

dependabot[bot]

dependencies

Fix CVE dependency issue

Fix issue #21 by update dependency org.hibernate:hibernate-core:5.4.24.Final @coderzc

CVEDetect

Dependency org.hibernate:hibernate-core, leading to CVE problem

Hi, In **biubiu**，there is a dependency **org.hibernate:hibernate-core:4.3.8.Final** that calls the risk method. [CVE-2020-25638](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25638) The scope of this CVE affected version is **[,5.4.24.Final)** After further analysis, in this project, the main...

CVEDetect