Skip to content

Commit bcf93bb

Browse files
fix(deps): bump spring-boot to 4.0.7 for patched Spring Framework 7.0.8 (GHSA-x23c-287f-qqv5)
Spring Boot 4.0.6 manages Spring Framework 7.0.7, which is vulnerable to a Denial of Service issue in versioned resource handling in Spring MVC and WebFlux (GHSA-x23c-287f-qqv5, Dependabot alerts #119 and #120). Spring Boot 4.0.7 upgrades the managed Spring Framework version to the patched 7.0.8. Co-Authored-By: Catarina Pinheiro Correia <catarina.correia@getyourguide.com>
1 parent 850a009 commit bcf93bb

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

gradle/libs.versions.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
[versions]
22
java = "21"
3-
spring-boot = "4.0.6"
3+
spring-boot = "4.0.7"
44
spring-dependency-management = "1.1.7"
55
openapi-generator = "7.21.0"
66
openapi-tools = "0.2.9"

0 commit comments

Comments
 (0)