From a2d3e54427a43b52ffef2ab0129aac2bd4286b8c Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 4 Sep 2026 08:22:05 +0000 Subject: [PATCH] fix(deps): bump org.apache.tomcat.embed:tomcat-embed-core minimum version to 11.0.25 (GHSA-gcx9-497g-6cp6) Co-Authored-By: Catarina Pinheiro Correia --- build.gradle | 6 +++--- examples/example-spring-boot-starter-web/build.gradle | 2 +- examples/example-spring-boot-starter-webflux/build.gradle | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/build.gradle b/build.gradle index 39b6051..edaaea0 100644 --- a/build.gradle +++ b/build.gradle @@ -44,9 +44,9 @@ subprojects { because('GHSA-p47f-322f-whfh / GHSA-jhq6-gfmj-v8fx: logback-core deserialization of untrusted data / object injection') } if (requested.group == 'org.apache.tomcat.embed' && requested.name == 'tomcat-embed-core' - && requested.version != null && requested.version < '11.0.22') { - useVersion('11.0.22') - because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6 / GHSA-gx5v-xp9w-j4cg: Apache Tomcat < 11.0.22 vulnerabilities') + && requested.version != null && requested.version < '11.0.25') { + useVersion('11.0.25') + because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6 / GHSA-gx5v-xp9w-j4cg / GHSA-gcx9-497g-6cp6: Apache Tomcat < 11.0.25 vulnerabilities') } if (requested.group == 'io.netty' && requested.version != null && requested.version < '4.2.17.Final') { diff --git a/examples/example-spring-boot-starter-web/build.gradle b/examples/example-spring-boot-starter-web/build.gradle index 9611808..54ad52e 100644 --- a/examples/example-spring-boot-starter-web/build.gradle +++ b/examples/example-spring-boot-starter-web/build.gradle @@ -9,7 +9,7 @@ ext['jackson-bom.version'] = '3.1.4' ext['jackson-2-bom.version'] = '2.21.5' ext['logback.version'] = '1.5.34' ext['netty.version'] = '4.2.17.Final' -ext['tomcat.version'] = '11.0.22' +ext['tomcat.version'] = '11.0.25' ext['spring-framework.version'] = '7.0.8' dependencies { diff --git a/examples/example-spring-boot-starter-webflux/build.gradle b/examples/example-spring-boot-starter-webflux/build.gradle index b6f22db..cda2945 100644 --- a/examples/example-spring-boot-starter-webflux/build.gradle +++ b/examples/example-spring-boot-starter-webflux/build.gradle @@ -9,7 +9,7 @@ ext['jackson-bom.version'] = '3.1.4' ext['jackson-2-bom.version'] = '2.21.5' ext['logback.version'] = '1.5.34' ext['netty.version'] = '4.2.17.Final' -ext['tomcat.version'] = '11.0.22' +ext['tomcat.version'] = '11.0.25' ext['spring-framework.version'] = '7.0.8' dependencies {