From e1348b53c0bc7a5c4c58d173822d584f6c829575 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 19 Aug 2025 06:03:56 +0000 Subject: [PATCH] build(deps): bump org.springframework:spring-web from 6.2.8 to 6.2.10 Bumps [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) from 6.2.8 to 6.2.10. - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.8...v6.2.10) --- updated-dependencies: - dependency-name: org.springframework:spring-web dependency-version: 6.2.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index ede3bee..5eeb248 100644 --- a/build.gradle +++ b/build.gradle @@ -69,7 +69,7 @@ subprojects { // Security constraints constraints { - implementation("org.springframework:spring-web:6.2.8") { + implementation("org.springframework:spring-web:6.2.10") { because("versions below 6.2.8 have security vulnerabilities including CVE-2024-38820 - see dependabot #12") } implementation("org.apache.tomcat.embed:tomcat-embed-core:10.1.42") {