You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The current spring version (3.2.5) includes spring-boot-starter-tomcat (from spring-boot-starter-web) which has a security issue (CVE-2024-34750).
This CVE relates to a issue when using HTTP2. Reading the documentation from spring it seems like HTTP2 is not enabled by default so this does not impact the project directly.
However some security scanning tools only check the version and raise an issue, so we might as well just upgrade the spring version.
Upgrading to 3.2.8 should 'fix' the issue and you stay within the same minor version of spring.
The text was updated successfully, but these errors were encountered:
The current spring version (3.2.5) includes spring-boot-starter-tomcat (from spring-boot-starter-web) which has a security issue (CVE-2024-34750).
This CVE relates to a issue when using HTTP2. Reading the documentation from spring it seems like HTTP2 is not enabled by default so this does not impact the project directly.
However some security scanning tools only check the version and raise an issue, so we might as well just upgrade the spring version.
Upgrading to 3.2.8 should 'fix' the issue and you stay within the same minor version of spring.
The text was updated successfully, but these errors were encountered: