File tree Expand file tree Collapse file tree 1 file changed +4
-1
lines changed Expand file tree Collapse file tree 1 file changed +4
-1
lines changed Original file line number Diff line number Diff line change @@ -3,7 +3,7 @@ plugins {
3
3
alias(libs. plugins. nexus. publish)
4
4
}
5
5
6
- ext[' spring-framework.version' ] = ' 6.2.8 '
6
+ ext[' spring-framework.version' ] = ' 6.2.10 '
7
7
ext[' tomcat.version' ] = ' 10.1.42'
8
8
9
9
apply from : " ${ rootDir} /gradle/publish-root.gradle"
@@ -72,6 +72,9 @@ subprojects {
72
72
implementation(" org.springframework:spring-web:6.2.10" ) {
73
73
because(" versions below 6.2.8 have security vulnerabilities including CVE-2024-38820 - see dependabot #12" )
74
74
}
75
+ implementation(" org.springframework:spring-webmvc:6.2.10" ) {
76
+ because(" versions below 6.2.10 have Path Traversal Vulnerability CVE-2025-41242 - see dependabot #247" )
77
+ }
75
78
implementation(" org.apache.tomcat.embed:tomcat-embed-core:11.0.10" ) {
76
79
because(" versions below 10.1.42 have security vulnerabilities including CVE-2024-56337 - see dependabot #13" )
77
80
}
You can’t perform that action at this time.
0 commit comments