Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: CSPF-Founder/JavaVulnerableLab
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: master
Choose a base ref
...
head repository: sudhakarkr/JavaVulnerableLab
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: master
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 8 commits
  • 2 files changed
  • 2 contributors

Commits on Jul 6, 2026

  1. fix: bump mysql:mysql-connector-java to 5.1.41 

    Resolves CVE-2017-3523.
    vuln-mgmt-platform
    vuln-mgmt-platform committed Jul 6, 2026
    Configuration menu
    Copy the full SHA
    5dba8ca View commit details
    Browse the repository at this point in the history

Commits on Jul 13, 2026

  1. Merge pull request #33 from sudhakarkr/fix/bump-mysql-mysql-connector… 

    …-java-efbca1a9

fix: bump mysql:mysql-connector-java to 5.1.41 (CVE-2017-3523)
    @sudhakarkr
    sudhakarkr authored Jul 13, 2026
    Configuration menu
    Copy the full SHA
    d024a00 View commit details
    Browse the repository at this point in the history

Commits on Jul 15, 2026

  1. fix: bump mysql:mysql-connector-java to 5.1.42 

    Resolves CVE-2017-3589.
    vuln-mgmt-platform
    vuln-mgmt-platform committed Jul 15, 2026
    Configuration menu
    Copy the full SHA
    48a6e3c View commit details
    Browse the repository at this point in the history

  2. Merge pull request #38 from sudhakarkr/fix/bump-mysql-mysql-connector… 

    …-java-68f782e1

fix: bump mysql:mysql-connector-java to 5.1.42 (CVE-2017-3589)
    @sudhakarkr
    sudhakarkr authored Jul 15, 2026
    Configuration menu
    Copy the full SHA
    d4184ca View commit details
    Browse the repository at this point in the history

Commits on Aug 3, 2026

  1. fix: CWE-434 in src/main/java/org/cysecurity/cspf/jvl/controller/AddP… 

    …age.java

Added strict filename validation (allowlist regex restricting to simple alphanumeric names with safe extensions .html/.htm/.txt) and a canonical-path containment check to ensure the target file stays within the /pages directory. This prevents attackers from uploading executable content such as .jsp web shells or traversing to arbitrary paths, addressing the CWE-434 unrestricted file upload finding while keeping the code's structure and behavior otherwise unchanged.
    vuln-mgmt-platform
    vuln-mgmt-platform committed Aug 3, 2026
    Configuration menu
    Copy the full SHA
    290ddda View commit details
    Browse the repository at this point in the history

  2. Merge pull request #42 from sudhakarkr/fix/cwe-434-944db9fa 

    fix: CWE-434 in src/main/java/org/cysecurity/cspf/jvl/controller/AddPage.java
    @sudhakarkr
    sudhakarkr authored Aug 3, 2026
    Configuration menu
    Copy the full SHA
    2187ef6 View commit details
    Browse the repository at this point in the history

  3. fix: bump mysql:mysql-connector-java to 8.0.28 

    Resolves CVE-2022-21363.
    vuln-mgmt-platform
    vuln-mgmt-platform committed Aug 3, 2026
    Configuration menu
    Copy the full SHA
    168ffcd View commit details
    Browse the repository at this point in the history

  4. Merge pull request #43 from sudhakarkr/fix/bump-mysql-mysql-connector… 

    …-java-0e46040e

fix: bump mysql:mysql-connector-java to 8.0.28 (CVE-2022-21363)
    @sudhakarkr
    sudhakarkr authored Aug 3, 2026
    Configuration menu
    Copy the full SHA
    018dbef View commit details
    Browse the repository at this point in the history
Loading