Updating Spring-security-web for Security Vulnerability
Type of change
-
Bug Fix -
Feature
Please provide link to gitlab issue or ADR(Architecture Decision Record)
Does this introduce a change in the core logic?
- NO
Does this introduce a change in the cloud provider implementation, if so which cloud?
-
AWS -
Azure -
Google Cloud -
IBM
Does this introduce a breaking change?
- NO
What is the current behavior?
Vulnerabilities:
- Common: https://community.opengroup.org/osdu/platform/system/notification/-/security/vulnerabilities/39532
- Common: https://community.opengroup.org/osdu/platform/system/notification/-/security/vulnerabilities/39533
- Azure: https://community.opengroup.org/osdu/platform/system/notification/-/security/vulnerabilities/39541
- AWS: https://community.opengroup.org/osdu/platform/system/notification/-/security/vulnerabilities/39539
- IBM: https://community.opengroup.org/osdu/platform/system/notification/-/security/vulnerabilities/39524
- GC: https://community.opengroup.org/osdu/platform/system/notification/-/security/vulnerabilities/39542
What is the new/expected behavior?
Updating spring-security-web and spring-boot-starter (dependency) for fixing above vulnerabilities After fix:
Security scan: https://community.opengroup.org/osdu/platform/system/notification/-/jobs/3265276
Have you added/updated Unit Tests and Integration Tests?
NO
Any other useful information
Edited by Ayushi Srivastava