·
2 commits
to main
since this release
f95cb35
This commit was signed with the committer’s verified signature.
ryanjbaxter
Ryan Baxter
Security
- CVE-2026-59291 — Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function
- CVE-2026-59297 — Spring Cloud Function can incorrectly determine if URI is secure
- CVE-2026-59298 — Potential for improper filtering of HTTP headers in Spring Cloud Function
- CVE-2026-59299 — Composition lookup can potentially poison base function in Spring Cloud Function
- CVE-2026-59300 — Potential for logging sensitive data in Spring Cloud Function AWS
- CVE-2026-59301 — Potential for logging sensitive data in Spring Cloud Function Azure
What's Changed
- Bump antora from 3.2.0-alpha.12 to 3.2.0-rc.2 in /docs by @dependabot[bot] in #1417
- Bump actions/checkout from 6 to 7 by @dependabot[bot] in #1413
- Ignore release-train workflow dependencies in Dependabot by @ryanjbaxter in #1427
- Bump grpc.version from 1.81.0 to 1.81.1 by @dependabot[bot] in #1424
- Bump @springio/antora-extensions from 1.14.12 to 1.14.13 in /docs by @dependabot[bot] in #1438
New Contributors
- @ryanjbaxter made their first contribution in #1427
Full Changelog: v5.0.3...v5.0.4
Contributors
ryanjbaxter and dependabot