[Snyk] Security upgrade org.springframework.cloud:spring-cloud-starter-netflix-eureka-client from 1.4.0.RELEASE to 3.0.0

[Yuyang105]

Snyk has created this PR to fix 1 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Allocation of Resources Without Limits or Throttling SNYK-JAVA-COMMONSCONFIGURATION-10116124	631	org.springframework.cloud:spring-cloud-starter-netflix-eureka-client: 1.4.0.RELEASE -> 3.0.0 Major version upgrade No Known Exploit

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[guardrails]

⚠️ We detected 14 security issues in this pull request:

Vulnerable Libraries (14)

Severity	Details
High	pkg:maven/commons-beanutils/[email protected] (t) upgrade to: 1.9.4
Medium	pkg:maven/org.bouncycastle/[email protected] (t) upgrade to: 1.78,1.0.2.5,2.3.1
High	pkg:maven/org.springframework/[email protected] (t) upgrade to: 5.1.1,5.0.10,4.3.20
Medium	pkg:maven/com.fasterxml.woodstox/[email protected] (t) upgrade to: 6.4.0,5.4.0
Critical	pkg:maven/org.apache.xmlbeans/[email protected] (t) upgrade to: 3.0.0
Medium	pkg:maven/org.springframework/[email protected] (t) upgrade to: 6.1.14
N/A	pkg:maven/org.apache.tomcat.embed/[email protected] (t) upgrade to: 11.0.0-M17,10.1.19,9.0.86,8.5.99
High	pkg:maven/ch.qos.logback/[email protected] (t) upgrade to: 1.4.12,1.2.13,1.3.12
High	pkg:maven/com.fasterxml.jackson.core/[email protected] (t) upgrade to: 2.6.7.4,2.9.10.7,2.10.5.1
High	pkg:maven/org.springframework/[email protected] (t) upgrade to: 5.2.22.RELEASE,5.3.20
High	pkg:maven/org.springframework/[email protected] (t) upgrade to: 6.1.5,6.0.18,5.3.33
High	pkg:maven/com.google.protobuf/[email protected] (t) upgrade to: 3.16.3,3.19.6,3.20.3,3.21.7
Medium	pkg:maven/org.codehaus.groovy/[email protected] (t) upgrade to: 2.4.21,2.5.14,3.0.7
High	pkg:maven/org.springframework/[email protected] (t) upgrade to: 6.1.13

More info on how to fix Vulnerable Libraries in Java.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.