diff --git a/build.gradle b/build.gradle index be00b8d..036f1ba 100644 --- a/build.gradle +++ b/build.gradle @@ -70,10 +70,10 @@ subprojects { // Security constraints constraints { - implementation("org.springframework:spring-web:6.2.10") { + implementation("org.springframework:spring-web:6.2.11") { because("versions below 6.2.8 have security vulnerabilities including CVE-2024-38820 - see dependabot #12") } - implementation("org.springframework:spring-webmvc:6.2.10") { + implementation("org.springframework:spring-webmvc:6.2.11") { because("versions below 6.2.10 have Path Traversal Vulnerability CVE-2025-41242 - see dependabot #247") } implementation("org.apache.tomcat.embed:tomcat-embed-core:11.0.10") {