[Snyk] Security upgrade org.asciidoctor:asciidoctorj from 2.5.2 to 2.5.4

[RoyHarrow]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • pom.xml

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Upgrade	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	NULL Pointer Dereference SNYK-JAVA-JODATIME-6595834	org.asciidoctor:asciidoctorj: 2.5.2 -> 2.5.4	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 NULL Pointer Dereference

[RoyHarrow]

Checkmarx One – Scan Summary & Details – 04124a9a-639c-43b3-91db-e8ee358d6cd8

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2021-23358	Npm-underscore-1.10.2	Vulnerable Package
	CVE-2023-34034	Maven-org.springframework.security:spring-security-config-5.5.2	Vulnerable Package
	CVE-2023-34034	Maven-org.springframework.security:spring-security-web-5.5.2	Vulnerable Package
	CVE-2023-51775	Maven-org.bitbucket.b_c:jose4j-0.7.6	Vulnerable Package
	CVE-2023-5379	Maven-io.undertow:undertow-core-2.2.10.Final	Vulnerable Package
	CVE-2023-5685	Maven-org.jboss.xnio:xnio-api-3.8.4.Final	Vulnerable Package
	CVE-2023-6481	Maven-ch.qos.logback:logback-core-1.2.5	Vulnerable Package
	CVE-2024-1597	Maven-org.postgresql:postgresql-42.2.23	Vulnerable Package
	CVE-2024-22243	Maven-org.springframework:spring-web-5.3.9	Vulnerable Package
	CVE-2024-22257	Maven-org.springframework.security:spring-security-core-5.5.2	Vulnerable Package
	CVE-2024-22259	Maven-org.springframework:spring-web-5.3.9	Vulnerable Package
	Absolute_Path_Traversal	/webgoat-lessons/path-traversal/src/main/java/org/owasp/webgoat/path_traversal/ProfileZipSlip.java: 36	Attack Vector
	Absolute_Path_Traversal	/webgoat-lessons/path-traversal/src/main/java/org/owasp/webgoat/path_traversal/ProfileZipSlip.java: 36	Attack Vector
	Absolute_Path_Traversal	/webgoat-lessons/path-traversal/src/main/java/org/owasp/webgoat/path_traversal/ProfileUploadRemoveUserInput.java: 26	Attack Vector
	Absolute_Path_Traversal	/webgoat-lessons/path-traversal/src/main/java/org/owasp/webgoat/path_traversal/ProfileUploadFix.java: 29	Attack Vector
	Absolute_Path_Traversal	/webgoat-lessons/path-traversal/src/main/java/org/owasp/webgoat/path_traversal/ProfileUpload.java: 28	Attack Vector
	Absolute_Path_Traversal	/webwolf/src/main/java/org/owasp/webwolf/FileServer.java: 69	Attack Vector
	CVE-2023-51074	Maven-com.jayway.jsonpath:json-path-2.5.0	Vulnerable Package
	CVE-2024-1459	Maven-io.undertow:undertow-core-2.2.10.Final	Vulnerable Package
	CVE-2024-25710	Maven-org.apache.commons:commons-compress-1.20	Vulnerable Package
	Improper_Restriction_of_XXE_Ref	/webgoat-lessons/xxe/src/main/java/org/owasp/webgoat/xxe/BlindSendFileAssignment.java: 79	Attack Vector
	Improper_Restriction_of_XXE_Ref	/webgoat-lessons/xxe/src/main/java/org/owasp/webgoat/xxe/SimpleXXE.java: 69	Attack Vector
	Improper_Restriction_of_XXE_Ref	/webgoat-lessons/xxe/src/main/java/org/owasp/webgoat/xxe/ContentTypeAssignment.java: 60	Attack Vector
	JWT_Sensitive_Information_Exposure	/webgoat-lessons/jwt/src/main/java/org/owasp/webgoat/jwt/JWTRefreshEndpoint.java: 129	Attack Vector
	Parameter_Tampering	/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/sql_injection/advanced/SqlInjectionLesson6a.java: 51	Attack Vector
	Parameter_Tampering	/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/sql_injection/mitigation/Servers.java: 67	Attack Vector
	Parameter_Tampering	/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/sql_injection/advanced/SqlInjectionChallenge.java: 56	Attack Vector
	SSRF	/webgoat-lessons/password-reset/src/main/java/org/owasp/webgoat/password_reset/ResetLinkAssignmentForgotPassword.java: 65	Attack Vector
	Update Instruction Alone	/Dockerfile: 5	Instruction 'RUN update' should always be followed by ' install' in the same RUN statement
	Use_Of_Hardcoded_Password	/webgoat-integration-tests/src/test/java/org/owasp/webgoat/SqlInjectionAdvancedTest.java: 24	Attack Vector
	Use_Of_Hardcoded_Password	/webgoat-integration-tests/src/test/java/org/owasp/webgoat/SqlInjectionAdvancedTest.java: 19	Attack Vector
	Use_Of_Hardcoded_Password	/webgoat-integration-tests/src/test/java/org/owasp/webgoat/SqlInjectionAdvancedTest.java: 17	Attack Vector
	Use_Of_Hardcoded_Password	/webgoat-integration-tests/src/test/java/org/owasp/webgoat/IDORTest.java: 48	Attack Vector
	Use_Of_Hardcoded_Password	/webgoat-integration-tests/src/test/java/org/owasp/webgoat/GeneralLessonTest.java: 102	Attack Vector
	Use_Of_Hardcoded_Password	/webgoat-integration-tests/src/test/java/org/owasp/webgoat/GeneralLessonTest.java: 92	Attack Vector
	Use_Of_Hardcoded_Password	/webgoat-integration-tests/src/test/java/org/owasp/webgoat/CSRFTest.java: 190	Attack Vector
	Use_Of_Hardcoded_Password	/webgoat-integration-tests/src/test/java/org/owasp/webgoat/ChallengeTest.java: 80	Attack Vector

Fixed Issues

Severity	Issue	Source File / Package
	CVE-2022-40151	Maven-com.thoughtworks.xstream:xstream-1.4.5
	Cx8fd408ac-dd80	Maven-com.beust:jcommander-1.72
	Update Instruction Alone	/Dockerfile: 3