FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

[馃惛 Frogbot] Update version of org.springframework:spring-webmvc to 6.1.14 by gNurit 路 Pull Request #5 路 gNurit/BenchmarkJavaTestNurit 路 GitHub

[馃惛 Frogbot] Update version of org.springframework:spring-webmvc to 6.1.14 - #5

Open
gNurit wants to merge 1 commit into
masterfrom
frogbot-org.springframework_spring-webmvc-c18b9278f4c54f56d684356d19c20bd2
Open

gNurit wants to merge 1 commit into
masterfrom
frogbot-org.springframework_spring-webmvc-c18b9278f4c54f56d684356d19c20bd2

Conversation

gNurit commented May 4, 2025

Copy link
Copy Markdown
Owner

馃摝 Vulnerable Dependencies

Severity ID Contextual Analysis Direct Dependencies Impacted Dependency Fixed Versions

Medium
CVE-2024-38828 Not Covered org.springframework:spring-webmvc:5.3.39 org.springframework:spring-webmvc 5.3.39 [5.3.42]

馃敄 Details

Vulnerability Details

Policies: demo
Watch Name: github_wath
Contextual Analysis: Not Covered
Direct Dependencies: org.springframework:spring-webmvc:5.3.39
Impacted Dependency: org.springframework:spring-webmvc:5.3.39
Fixed Versions: [5.3.42]
CVSS V3: 5.3

Spring MVC controller methods with an @RequestBody byte[]聽method parameter are vulnerable to a DoS attack.


gNurit commented May 4, 2025

Copy link
Copy Markdown
Owner Author


This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants


Back | FazBrowse Home | New Git URL