chore: update versions.json in 23.5 with latest WC

[vaadin-bot]

No description provided.

[github-actions]

Dependencies Report

• 🟠 Known Vulnerabilities:

  • Vulnerabilities in: pkg:npm/libxmljs2@0.33.0 [CVE-2024-34394, CVE-2024-34393] (osv-scan)
    👌 This is coming from the tools, @cyclonedx/cyclonedx, we have used for sbom module, FP for us.
    ·
    • Vulnerabilities in: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2 [CVE-2023-35116] (owasp)
      👌 based on the issue this is not a CVE Stack overflow error caused by serialization of Map with cyclic dependency -- NOT CVE FasterXML/jackson-databind#3972
      · cpe:2.3:a:fasterxml:jackson-databind::::::::

• 🚫 Vulnerabilities:

  • Vulnerabilities in: pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.86 [CVE-2024-34750] (osv-scan)
    ·
    • Vulnerabilities in: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.86 [CVE-2024-34750] (osv-scan)
      ·
    • Vulnerabilities in: pkg:maven/org.springframework/spring-beans@5.3.32 [CVE-2024-38827] (osv-scan)
      ·
    • Vulnerabilities in: pkg:maven/org.springframework/spring-context@5.3.32 [CVE-2024-38827, CVE-2024-38820] (osv-scan)
      ·
    • Vulnerabilities in: pkg:maven/org.springframework/spring-core@5.3.32 [CVE-2024-38827, CVE-2024-38820] (osv-scan,owasp)
      ·
      · cpe:2.3:a:vmware:spring_framework::::::::
    • Vulnerabilities in: pkg:maven/org.springframework/spring-expression@5.3.32 [CVE-2024-38827, CVE-2024-38808, CVE-2024-38820] (osv-scan,owasp)
      ·
      · cpe:2.3:a:org.springframework:spring-expression:5.3.32:::::::*
      · cpe:2.3:a:vmware:spring_framework::::::::
    • Vulnerabilities in: pkg:maven/org.springframework/spring-jdbc@5.3.32 [CVE-2024-38827] (osv-scan)
      ·
    • Vulnerabilities in: pkg:maven/org.springframework/spring-web@5.3.32 [CVE-2024-38809, CVE-2024-22262, CVE-2016-1000027, CVE-2024-22259, CVE-2024-38828, CVE-2024-38820] (osv-scan,owasp)
      · cpe:2.3:a:org.springframework:spring-web:5.3.32:::::::*
      · cpe:2.3:a:vmware:spring_framework::::::::
    • Vulnerabilities in: pkg:maven/org.springframework/spring-webmvc@5.3.32 [CVE-2024-38816, CVE-2024-38828, CVE-2024-38820] (osv-scan,owasp)
      · cpe:2.3:a:org.springframework:spring-webmvc:5.3.32:::::::*
      ·
      · cpe:2.3:a:vmware:spring_framework::::::::
    • Vulnerabilities in: pkg:maven/org.springframework/spring-webflux@5.3.32 [CVE-2024-38816] (osv-scan)
      ·
    • Vulnerabilities in: pkg:npm/path-to-regexp@2.4.0 [CVE-2024-45296] (osv-scan)
      ·

• 🟠 Changes in 23.5-SNAPSHOT since V23.5.12

  • 2 packages removed (2 external, 0 vaadin)
  • 1 packages added (1 external, 0 vaadin)
  • 34 packages modified (25 external, 9 vaadin)
  • 706 packages same (539 external, 167 vaadin)

[Click for more Details]