Skip to content

Commit

Permalink
[90422] update spring-webflux, spring-webmvc dependencies to 6.1.15 t…
Browse files Browse the repository at this point in the history
…o address CVE-2024-38819
  • Loading branch information
Panagiotis-Kapralos-ECDC committed Nov 18, 2024
1 parent 018d1b4 commit 555f66c
Showing 1 changed file with 6 additions and 5 deletions.
11 changes: 6 additions & 5 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -243,18 +243,19 @@
<version>6.1.15</version>
</dependency>

<!-- Explicitly set dependency of spring-webmvc, spring-webflux to 6.1.13 in order to address vulnerability CVE-2024-38816.
This is a temporary solution, as the spring-cloud-starter-parent 2023.0.3 depends on the vulnerable version 6.1.10.
TODO: remove this dependency as soon as the spring-cloud-starter-parent is updated to a future version that address the vulnerability -->
<!-- Explicitly set dependency of spring-webmvc, spring-webflux to 6.1.15 in order to address
vulnerabilities CVE-2024-38816, CVE-2024-38819. This is a temporary solution, as
the spring-cloud-starter-parent 2023.0.3 depends on the vulnerable version 6.1.10.
TODO: remove this dependency as soon as the spring-cloud-starter-parent is updated to a future version that address the vulnerability -->
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-webmvc</artifactId>
<version>6.1.13</version>
<version>6.1.15</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-webflux</artifactId>
<version>6.1.13</version>
<version>6.1.15</version>
</dependency>

<!-- Explicitly set dependency of various spring libraries to 6.1.15 in order
Expand Down

0 comments on commit 555f66c

Please sign in to comment.