Skip to content

Commit f6293d0

Browse files
build(deps): bump spring-boot from 4.0.2 to 4.0.4
Fixes CVE-2026-22737 (GHSA-4773-3jfm-qmx3) - Spring Framework path traversal via script view templates. Spring Boot 4.0.4 brings Spring Framework 7.0.6 which contains the fix. Closes dependabot alert #40. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent 7a9bdef commit f6293d0

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

gradle/libs.versions.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
[versions]
22
java = "21"
3-
spring-boot = "4.0.2"
3+
spring-boot = "4.0.4"
44
spring-dependency-management = "1.1.7"
55
openapi-generator = "7.20.0"
66
openapi-tools = "0.2.9"

0 commit comments

Comments
 (0)