From 01831f18f9de91d9f64232022810af435c9003b3 Mon Sep 17 00:00:00 2001
From: Nico Athanassiadis <nico@dsv.su.se>
Date: Thu, 23 Jan 2025 09:30:47 +0100
Subject: [PATCH] Updated spring-boot and springdoc versions
The updated versions should fix CVE-2024-45801.
Was forced to update spring-boot 3.4.1 to be able to use the latest version of springdoc as per the
springdoc compability matrix.
---
pom.xml | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index a4b4f57961..3e5972cbae 100755
--- a/pom.xml
+++ b/pom.xml
@@ -39,6 +39,8 @@
<jersey.version>3.1.6</jersey.version>
<poi.version>5.2.5</poi.version>
<jackson.version>2.17.0</jackson.version>
+ <spring.boot.version>3.4.1</spring.boot.version>
+ <springdoc.openapi.version>2.8.3</springdoc.openapi.version>
<!-- Database stuff -->
<database.showSql>false</database.showSql>
@@ -100,7 +102,7 @@
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-dependencies</artifactId>
- <version>3.2.12</version>
+ <version>${spring.boot.version}</version>
<scope>import</scope>
<type>pom</type>
</dependency>
@@ -261,7 +263,7 @@
<dependency>
<groupId>org.springdoc</groupId>
<artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
- <version>2.5.0</version>
+ <version>${springdoc.openapi.version}</version>
</dependency>
</dependencies>
</dependencyManagement>