Merge pull request #702 from hmcts/DTSRD-151

Upped spring framework version to fix CVE-2023-20860
hmcts · Apr 5, 2023 · bb81f0e · bb81f0e
2 parents 21a359f + 90f5c9e
commit bb81f0e
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 4 deletions.
diff --git a/build.gradle b/build.gradle
@@ -43,7 +43,7 @@ def versions = [
   restAssured        : '4.3.3',
   jackson            : '2.14.2',
   log4j              : '2.17.1',
-  springVersion      : '5.3.20',
+  springVersion      : '5.3.26',
   poi                : '4.1.2',
   logback            : '1.2.11',
   testContainer_postgresql: '1.17.6'

diff --git a/config/owasp/suppressions.xml b/config/owasp/suppressions.xml
@@ -18,7 +18,4 @@ file name: launchdarkly-java-server-sdk-5.10.2.jar (shaded: org.yaml:snakeyaml:1
    <suppress>
      <cve>CVE-2023-20861</cve>
    </suppress>
-   <suppress>
-     <cve>CVE-2023-20860</cve>
-   </suppress>
 </suppressions>