DHFPROD-10595: Address Palamida security vulnerabilities - Spring

Marklogic-retired · Aug 28, 2023 · 7abf6f6 · 7abf6f6
1 parent 97ea77f
commit 7abf6f6
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 7 deletions.
diff --git a/marklogic-data-hub-junit5/build.gradle b/marklogic-data-hub-junit5/build.gradle
@@ -18,7 +18,7 @@ snyk {
 dependencies {
     api "org.junit.jupiter:junit-jupiter:5.7.2"
     api "org.slf4j:slf4j-api:2.0.7"
-    api "org.springframework:spring-test:5.3.24"
+    api "org.springframework:spring-test:5.3.29"
     api project(":marklogic-data-hub")
 
     api "com.marklogic:marklogic-unit-test-client:1.3.0"

diff --git a/marklogic-data-hub/build.gradle b/marklogic-data-hub/build.gradle
@@ -61,14 +61,14 @@ dependencies {
     implementation 'commons-io:commons-io:2.11.0'
 
     constraints {
-        implementation('org.springframework:spring-beans:5.3.23') {
-            because 'spring-beans:5.3.7 is vulnerable to remote code execution and other critical security vulnerabilities'
+        implementation('org.springframework:spring-beans:5.3.29') {
+            because 'spring-beans:5.3.23 is vulnerable to remote code execution and other critical security vulnerabilities'
         }
-        implementation('org.springframework:spring-jcl:5.3.23') {
-            because 'spring-jcl:5.3.7 is vulnerable to remote code execution and other critical security vulnerabilities'
+        implementation('org.springframework:spring-jcl:5.3.29') {
+            because 'spring-jcl:5.3.23 is vulnerable to remote code execution and other critical security vulnerabilities'
         }
-        implementation('org.springframework:spring-core:5.3.23') {
-            because 'spring-core:5.3.7 is vulnerable to remote code execution and other critical security vulnerabilities'
+        implementation('org.springframework:spring-core:5.3.29') {
+            because 'spring-core:5.3.23 is vulnerable to remote code execution and other critical security vulnerabilities'
         }
     }