Upgrade dependent libraries to resolve High and Critical security Vulnerabilities
Following are the high and critical security vulnerabilities found from M24 image of legal service with tag v0.27.0:
Severity: "CRITICAL":
- CVE-2024-38821: Spring-WebFlux: Authorization Bypass of Static Resources in WebFlux Applications
Severity: "HIGH":
- CVE-2024-7254: "protobuf: StackOverflow vulnerability in Protocol Buffers
- CVE-2024-38816: spring-webmvc: Path Traversal Vulnerability in Spring Applications Using RouterFunctions and FileSystemResource
Edited by Mina Otgonbold