Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Backport 3.29] Fix CVE #2877

Merged
merged 1 commit into from Mar 24, 2023
Merged

[Backport 3.29] Fix CVE #2877

merged 1 commit into from Mar 24, 2023

Conversation

c2c-bot-gis-ci
Copy link
Contributor

Backport of #2875

@sbrunner
Fix CVE
290cd7f 
    Upgrade org.springframework:spring-context@5.3.20 to org.springframework:spring-context@5.3.26 to fix
    ✗ Allocation of Resources Without Limits or Throttling (new) [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-3369749] in org.springframework:spring-expression@5.3.20
      introduced by org.springframework:spring-webmvc@5.2.22.RELEASE > org.springframework:spring-expression@5.3.20 and 3 other path(s)

    Upgrade org.springframework:spring-webmvc@5.2.22.RELEASE to org.springframework:spring-webmvc@5.3.26 to fix
    ✗ Allocation of Resources Without Limits or Throttling (new) [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-3369749] in org.springframework:spring-expression@5.3.20
      introduced by org.springframework:spring-webmvc@5.2.22.RELEASE > org.springframework:spring-expression@5.3.20 and 3 other path(s)
@github-advanced-security
Copy link

You have successfully added a new SonarCloud configuration ``. As part of the setup process, we have scanned this repository and found no existing alerts. In the future, you will see all code scanning alerts on the repository Security tab.

@sbrunner sbrunner enabled auto-merge March 24, 2023 16:23
@sbrunner sbrunner merged commit 651ecc5 into 3.29 Mar 24, 2023
12 checks passed
@sbrunner sbrunner deleted the backport/2875-to-3.29 branch March 24, 2023 16:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sbrunner sbrunner sbrunner approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@c2c-bot-gis-ci @sbrunner