Merge pull request #1755 from hmcts/DTSAM-137_CVE-2023-34042_Fix

DTSAM-137 CVE-2023-34042 spring-security upgraded to 5.7.11
hmcts · Feb 13, 2024 · 40119bc · 40119bc
2 parents 1dddaba + 87872d4
commit 40119bc
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 5 deletions.
diff --git a/build.gradle b/build.gradle
@@ -42,7 +42,7 @@ def versions = [
         serenity       : '2.2.12',
         springBoot     : '2.7.18',
         spring         : '5.3.31',
-        springSecurity : '5.7.10',
+        springSecurity : '5.7.11',
         springHystrix  : '2.1.1.RELEASE',
         swagger2Version: '2.10.5',
         tomcat         : '9.0.83',

diff --git a/config/owasp/suppressions.xml b/config/owasp/suppressions.xml
@@ -12,8 +12,4 @@
         <notes>https://tools.hmcts.net/jira/browse/AM-3065 azure</notes>
         <cve>CVE-2023-36052</cve>
     </suppress>
-    <suppress>
-        <notes>https://tools.hmcts.net/jira/browse/DTSAM-137 spring-security</notes>
-        <cve>CVE-2023-34042</cve>
-    </suppress>
 </suppressions>