Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(sec): upgrade org.springframework.security:spring-security-oauth2-client to 5.7.5 #7628

Conversation

WHBANG
Copy link

@WHBANG WHBANG commented Nov 16, 2022

What happened?

There are 1 security vulnerabilities found in org.springframework.security:spring-security-oauth2-client 5.7.1

What did I do?

Upgrade org.springframework.security:spring-security-oauth2-client from 5.7.1 to 5.7.5 for vulnerability fix

What did you expect to happen?

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS

@ashvayka ashvayka changed the base branch from master to develop/3.5 April 7, 2023 12:13
@ashvayka
Copy link
Member

ashvayka commented Apr 7, 2023

@YevhenBondarenko please review and approve.

@ashvayka ashvayka added the Core Changes to Core label Apr 7, 2023
@ashvayka ashvayka added this to the 3.5 milestone Apr 7, 2023
@YevhenBondarenko YevhenBondarenko changed the base branch from develop/3.5 to feature/java-17-migration April 7, 2023 12:39
@YevhenBondarenko YevhenBondarenko modified the milestones: 3.5, 3.5.1 Apr 7, 2023
@YevhenBondarenko YevhenBondarenko added the Ignore for release Ignore this PR for release notes label Apr 7, 2023
@YevhenBondarenko YevhenBondarenko merged commit 5b4c049 into thingsboard:feature/java-17-migration Apr 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Core Changes to Core Ignore for release Ignore this PR for release notes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants