CCD-5950: (#310)

Fix CVE-2024-38820, upgraded springSecurity from 5.8.10 to 5.8.15 Co-authored-by: shahirali <shahirali@outlook.com>
hmcts · Dec 12, 2024 · 080e8c9 · 080e8c9
1 parent e032e1c
commit 080e8c9
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 4 deletions.
diff --git a/build.gradle b/build.gradle
@@ -144,7 +144,7 @@ ext {
 }
 
 ext['spring-framework.version'] = '5.3.27'
-ext['spring-security.version'] = '5.8.10'
+ext['spring-security.version'] = '5.8.15'
 ext['log4j2.version'] = '2.17.1'
 ext['jackson.version'] = '2.16.0'
 ext['snakeyaml.version'] = '2.0'

diff --git a/dependency-check-suppressions.xml b/dependency-check-suppressions.xml
@@ -3,10 +3,8 @@
     <notes>Temporary Suppression
         CVE-2022-45688 refer https://tools.hmcts.net/jira/browse/CCD-4373
         CVE-2023-5072 refer [Ticket]
-
-        CVE-2024-38820 refer [Ticket]</notes>
+    </notes>
     <cve>CVE-2022-45688</cve>
     <cve>CVE-2023-5072</cve>
-    <cve>CVE-2024-38820</cve>
   </suppress>
 </suppressions>