Bump spring-boot-autoconfigure from 2.4.4 to 2.5.15 in /Quick_ACG - #22
10 new alerts including 8 high severity security vulnerabilities
New alerts in code changed by this pull request
Security Alerts:
- 8 high
- 2 medium
Alerts not introduced by this pull request might have been detected because the code changes were too large.
See annotations below for details.
Annotations
Check warning on line 37 in .github/workflows/maven.yml
Code scanning / CodeQL
Workflow does not contain permissions Medium
Check failure on line 147 in src/main/resources/public/assets/search.js
Code scanning / CodeQL
DOM text reinterpreted as HTML High
Check failure on line 164 in src/main/resources/public/assets/search.js
Code scanning / CodeQL
DOM text reinterpreted as HTML High
Check failure on line 172 in src/main/resources/public/assets/search.js
Code scanning / CodeQL
DOM text reinterpreted as HTML High
Check failure on line 175 in src/main/resources/public/assets/search.js
Code scanning / CodeQL
DOM text reinterpreted as HTML High
Check failure on line 167 in src/main/resources/public/assets/search.js
Code scanning / CodeQL
DOM text reinterpreted as HTML High
Check failure on line 184 in src/main/resources/public/assets/search.js
Code scanning / CodeQL
DOM text reinterpreted as HTML High
Check failure on line 211 in src/main/resources/public/assets/search.js
Code scanning / CodeQL
DOM text reinterpreted as HTML High
Check warning on line 113 in src/main/webapp/WEB-INF/templates/views/pages/esignature/index.jsp
Code scanning / CodeQL
Inclusion of functionality from an untrusted source Medium
Check failure on line 49 in Quick_ACG/src/main/java/com/docusign/WebSecurityConfig.java
Code scanning / CodeQL
Disabled Spring CSRF protection High