trivy

DiSSCo · Mar 21, 2024 · eafa2de · eafa2de
1 parent 512e531
commit eafa2de
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/.github/workflows/.trivyignore b/.github/workflows/.trivyignore
@@ -1,4 +1,9 @@
 # Date: Feb 19, 2024
 # Issue: Libexpat, parsing large tokens can trigger a denial of service
 # Solution: Update docker image
-CVE-2023-52425
+CVE-2023-52425
+
+# Date: March 21, 2024
+# Issue: Vulnerability in spring-web
+# Solution: Spring boot needs to update its version of spring
+CVE-2024-22259
diff --git a/pom.xml b/pom.xml
@@ -27,6 +27,7 @@
     </sonar.coverage.jacoco.xmlReportPaths>
     <sonar.host.url>https://sonarcloud.io</sonar.host.url>
     <sonar.organization>dissco</sonar.organization>
+    <spring-security.version>6.2.3</spring-security.version> <!-- 21/03/24: CVE-2024-22257-->
     <version.victools>4.28.0</version.victools>
   </properties>