Does Quarkus have the spring4shell vulnerability? #25398
-
|
Hi, We developed microservices with Quarkus and its extensions for Spring( DI, Web API, and etc). Does it have any spring4shell vulnerability in our microservices? |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 2 replies
-
|
/cc @geoand |
Beta Was this translation helpful? Give feedback.
-
|
Hi, Quarkus does not suffer from said vulnerability because it never executes any Spring classes, it just uses the Spring API. If you dig even deeper, you'll see that the problematic Spring classes are not even on the classpath |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for your answer! |
Beta Was this translation helpful? Give feedback.
-
|
YW! |
Beta Was this translation helpful? Give feedback.
Hi, Quarkus does not suffer from said vulnerability because it never executes any Spring classes, it just uses the Spring API.
If you dig even deeper, you'll see that the problematic Spring classes are not even on the classpath