Merge pull request #73 from bci-oss/bugfix/fixes-for-cve-findings

fixes findings for CVE-2023-34053, CVE-2023-46589 and CVE-2023-6378
eclipse-tractusx · Dec 13, 2023 · a469bd0 · a469bd0
2 parents d5701bd + e191090
commit a469bd0
Show file tree

Hide file tree

Showing 3 changed files with 71 additions and 85 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -12,6 +12,8 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 - AUTHORS.md updated
 - SECURITY.md updated
 - Updated link to INSTALL.md at README.md to be reachable from DockerHub
+- Spring Boot version updated to 3.1.6 to fix CVE-2023-46589 and CVE-2023-34053
+- update logback version to fix CVE-2023-6378
 
 ## 0.2.6
 ### Added