[Snyk] Fix for 1 vulnerabilities by tyleragypt · Pull Request #36 · tyleragypt/BenchmarkJava · GitHub

Snyk has created this PR to fix 1 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	SQL Injection SNYK-JAVA-ORGHIBERNATE-15038759	710	org.hibernate:hibernate-core: 3.6.10.Final -> 5.3.38.Final org.hibernate:hibernate-entitymanager: 3.6.10.Final -> 5.3.38.Final Major version upgrade No Path Found Proof of Concept

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 SQL Injection

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGHIBERNATE-15038759

Checkmarx One – Scan Summary & Details – aa9c5b52-3b2a-4bcd-8ca0-a09a84e6704a

Fixed Issues (4)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	CVE-2020-25638	Maven-org.hibernate:hibernate-core-3.6.10.Final
	CVE-2019-14900	Maven-org.hibernate:hibernate-core-3.6.10.Final
	CVE-2022-22971	Maven-org.springframework:spring-core-4.3.30.RELEASE
	Update Instruction Alone	/Dockerfile: 5

Policy Management Violations (2) Policy Name: No highs or mediums

Rule Name: No Highs or Mediums
Scanner: SAST
Entity: Vulnerability
Conditions(s): High > 0, Medium > 0

Issue	Source File / Package	Checkmarx Insight
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02029.java: 55	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01155.java: 55	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00040.java: 49	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00623.java: 57	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02377.java: 50	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00359.java: 53	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00699.java: 69	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00131.java: 72	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00011.java: 54	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00061.java: 74	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00697.java: 57	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00526.java: 62	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00950.java: 67	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02464.java: 50	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01571.java: 50	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00698.java: 52	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00262.java: 74	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02106.java: 48	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02199.java: 52	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02556.java: 72	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00527.java: 64	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01904.java: 53	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02555.java: 72	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01985.java: 63	Attack Vector
Absolute_Path_Traversal	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02302.java: 62	Attack Vector
Client_DOM_XSS_from_AJAX	/src/main/webapp/js/testsuiteutils.js: 164	Attack Vector
Client_DOM_XSS_from_AJAX	/src/main/webapp/js/testsuiteutils.js: 164	Attack Vector
Client_DOM_XSS_from_AJAX	/src/main/webapp/js/testsuiteutils.js: 140	Attack Vector
Client_DOM_XSS_from_AJAX	/src/main/webapp/js/testsuiteutils.js: 151	Attack Vector
Client_DOM_XSS_from_AJAX	/src/main/webapp/js/testsuiteutils.js: 164	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00999.java: 46	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01000.java: 46	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00998.java: 46	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00996.java: 46	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01877.java: 46	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00997.java: 46	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01823.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01851.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00058.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01873.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00988.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00055.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00954.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01866.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00082.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01009.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00069.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00095.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01861.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00065.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00059.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00090.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01002.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01865.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01888.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01842.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00001.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00089.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00067.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00092.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01828.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00987.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00102.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00068.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00943.java: 45	Attack Vector
Dangerous_File_Inclusion	/src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00109.java: 45	Attack Vector

More results are available on the CxOne platform

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

fix: pom.xml to reduce vulnerabilities

87d7fe9

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGHIBERNATE-15038759

[Snyk] Fix for 1 vulnerabilities by tyleragypt · Pull Request #36 · tyleragypt/BenchmarkJava · GitHub

[Snyk] Fix for 1 vulnerabilities - #36

[Snyk] Fix for 1 vulnerabilities#36
tyleragypt wants to merge 1 commit into
masterfrom
snyk-fix-b32363ccc7b82fa7632e9113cc66ba54

tyleragypt commented Jan 23, 2026

Uh oh!

tyleragypt commented Jan 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

[Snyk] Fix for 1 vulnerabilities by tyleragypt · Pull Request #36 · tyleragypt/BenchmarkJava · GitHub

[Snyk] Fix for 1 vulnerabilities - #36

[Snyk] Fix for 1 vulnerabilities#36tyleragypt wants to merge 1 commit intomastertyleragypt/BenchmarkJava:masterfrom snyk-fix-b32363ccc7b82fa7632e9113cc66ba54tyleragypt/BenchmarkJava:snyk-fix-b32363ccc7b82fa7632e9113cc66ba54Copy head branch name to clipboard

Conversation

tyleragypt commented Jan 23, 2026

Snyk has created this PR to fix 1 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

Vulnerabilities that will be fixed with an upgrade:

Uh oh!

tyleragypt commented Jan 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

[Snyk] Fix for 1 vulnerabilities#36
tyleragypt wants to merge 1 commit into
masterfrom
snyk-fix-b32363ccc7b82fa7632e9113cc66ba54