Skip to content

Fix commons io, spring, and netty CVE

Timothy Lobl requested to merge lobtimo-cve-fix into master

All Submissions:

  • [Y] I have added an explanation of what changes in this merge do and why we should include it?
  • [N/A] I have updated the documentation accordingly.
  • [NA] I have added tests to cover my changes.
  • [Y] All new and existing tests passed.
  • [NA] My code follows the code style of this project.
  • [NA] I ran lint checks locally prior to submission.

What is the current behavior?

AWS implementation has CVE related to commons-io, netty-common, and spring security web

What is the new behavior?

  • Bumped dependencies to resolve CVE

Does this introduce a breaking change?

  • NO

Any relevant logs, error output, etc?

NO

Other information

NO

Merge request reports