File tree Expand file tree Collapse file tree 1 file changed +4
-1
lines changed Expand file tree Collapse file tree 1 file changed +4
-1
lines changed Original file line number Diff line number Diff line change @@ -3,7 +3,7 @@ plugins {
33 alias(libs. plugins. nexus. publish)
44}
55
6- ext[' spring-framework.version' ] = ' 6.2.8 '
6+ ext[' spring-framework.version' ] = ' 6.2.10 '
77ext[' tomcat.version' ] = ' 10.1.42'
88
99apply from : " ${ rootDir} /gradle/publish-root.gradle"
@@ -72,6 +72,9 @@ subprojects {
7272 implementation(" org.springframework:spring-web:6.2.10" ) {
7373 because(" versions below 6.2.8 have security vulnerabilities including CVE-2024-38820 - see dependabot #12" )
7474 }
75+ implementation(" org.springframework:spring-webmvc:6.2.10" ) {
76+ because(" versions below 6.2.10 have Path Traversal Vulnerability CVE-2025-41242 - see dependabot #247" )
77+ }
7578 implementation(" org.apache.tomcat.embed:tomcat-embed-core:11.0.10" ) {
7679 because(" versions below 10.1.42 have security vulnerabilities including CVE-2024-56337 - see dependabot #13" )
7780 }
You can’t perform that action at this time.
0 commit comments