Skip to content

Commit a2d3e54

Browse files
fix(deps): bump org.apache.tomcat.embed:tomcat-embed-core minimum version to 11.0.25 (GHSA-gcx9-497g-6cp6)
Co-Authored-By: Catarina Pinheiro Correia <catarina.correia@getyourguide.com>
1 parent b947a1d commit a2d3e54

3 files changed

Lines changed: 5 additions & 5 deletions

File tree

build.gradle

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -44,9 +44,9 @@ subprojects {
4444
because('GHSA-p47f-322f-whfh / GHSA-jhq6-gfmj-v8fx: logback-core deserialization of untrusted data / object injection')
4545
}
4646
if (requested.group == 'org.apache.tomcat.embed' && requested.name == 'tomcat-embed-core'
47-
&& requested.version != null && requested.version < '11.0.22') {
48-
useVersion('11.0.22')
49-
because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6 / GHSA-gx5v-xp9w-j4cg: Apache Tomcat < 11.0.22 vulnerabilities')
47+
&& requested.version != null && requested.version < '11.0.25') {
48+
useVersion('11.0.25')
49+
because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6 / GHSA-gx5v-xp9w-j4cg / GHSA-gcx9-497g-6cp6: Apache Tomcat < 11.0.25 vulnerabilities')
5050
}
5151
if (requested.group == 'io.netty'
5252
&& requested.version != null && requested.version < '4.2.17.Final') {

examples/example-spring-boot-starter-web/build.gradle

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ ext['jackson-bom.version'] = '3.1.4'
99
ext['jackson-2-bom.version'] = '2.21.5'
1010
ext['logback.version'] = '1.5.34'
1111
ext['netty.version'] = '4.2.17.Final'
12-
ext['tomcat.version'] = '11.0.22'
12+
ext['tomcat.version'] = '11.0.25'
1313
ext['spring-framework.version'] = '7.0.8'
1414

1515
dependencies {

examples/example-spring-boot-starter-webflux/build.gradle

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ ext['jackson-bom.version'] = '3.1.4'
99
ext['jackson-2-bom.version'] = '2.21.5'
1010
ext['logback.version'] = '1.5.34'
1111
ext['netty.version'] = '4.2.17.Final'
12-
ext['tomcat.version'] = '11.0.22'
12+
ext['tomcat.version'] = '11.0.25'
1313
ext['spring-framework.version'] = '7.0.8'
1414

1515
dependencies {

0 commit comments

Comments
 (0)