Skip to content

Commit 6a85c8e

Browse files
committed
fix vulnerabilities and upgrade backend dependency packages
1 parent b4230f7 commit 6a85c8e

1 file changed

Lines changed: 7 additions & 2 deletions

File tree

build.gradle

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -66,8 +66,13 @@ subprojects {
6666
implementation files("${rootDir}/libsext/dgrv4_HttpUtil-v4.5.19.0-4-g052aa0662-lib.jar")
6767

6868
implementation ('org.springframework.boot:spring-boot-starter-data-jpa'){
69+
//CVE-2025-41249
70+
exclude group:'org.springframework', module:'spring-core'
6971
}
7072

73+
// Correct the above exclusions, CVE-2025-41249
74+
implementation 'org.springframework:spring-core:6.2.11'
75+
7176
implementation ('org.springframework.boot:spring-boot-starter-web'){
7277
exclude group:'org.apache.tomcat.embed', module:'tomcat-embed-core'
7378
}
@@ -221,7 +226,7 @@ project(':dgrv4_Gateway_serv'){
221226

222227
// gRPC Proxy
223228
implementation 'net.devh:grpc-server-spring-boot-starter:2.15.0.RELEASE'
224-
implementation 'io.grpc:grpc-netty-shaded:1.61.0'
229+
implementation 'io.grpc:grpc-netty-shaded:1.75.0'
225230
implementation ('io.grpc:grpc-protobuf:1.61.0'){
226231
exclude group:'com.google.protobuf', module:'protobuf-java'
227232
}
@@ -241,7 +246,7 @@ project(':dgrv4_Gateway_serv'){
241246
exclude group:'io.netty', module:'netty-codec'
242247
}
243248
// Correct the above exclusions, CVE-2025-55163
244-
implementation ('io.netty:netty-codec-http2:4.1.124.Final') {
249+
implementation ('io.netty:netty-codec-http2:4.1.125.Final') {
245250
//CVE-2025-58057
246251
exclude group:'io.netty', module:'netty-codec'
247252
}

0 commit comments

Comments
 (0)