@@ -66,8 +66,13 @@ subprojects {
6666 implementation files(" ${ rootDir} /libsext/dgrv4_HttpUtil-v4.5.19.0-4-g052aa0662-lib.jar" )
6767
6868 implementation (' org.springframework.boot:spring-boot-starter-data-jpa' ){
69+ // CVE-2025-41249
70+ exclude group :' org.springframework' , module :' spring-core'
6971 }
7072
73+ // Correct the above exclusions, CVE-2025-41249
74+ implementation ' org.springframework:spring-core:6.2.11'
75+
7176 implementation (' org.springframework.boot:spring-boot-starter-web' ){
7277 exclude group :' org.apache.tomcat.embed' , module :' tomcat-embed-core'
7378 }
@@ -221,7 +226,7 @@ project(':dgrv4_Gateway_serv'){
221226
222227 // gRPC Proxy
223228 implementation ' net.devh:grpc-server-spring-boot-starter:2.15.0.RELEASE'
224- implementation ' io.grpc:grpc-netty-shaded:1.61 .0'
229+ implementation ' io.grpc:grpc-netty-shaded:1.75 .0'
225230 implementation (' io.grpc:grpc-protobuf:1.61.0' ){
226231 exclude group :' com.google.protobuf' , module :' protobuf-java'
227232 }
@@ -241,7 +246,7 @@ project(':dgrv4_Gateway_serv'){
241246 exclude group :' io.netty' , module :' netty-codec'
242247 }
243248 // Correct the above exclusions, CVE-2025-55163
244- implementation (' io.netty:netty-codec-http2:4.1.124 .Final' ) {
249+ implementation (' io.netty:netty-codec-http2:4.1.125 .Final' ) {
245250 // CVE-2025-58057
246251 exclude group :' io.netty' , module :' netty-codec'
247252 }
0 commit comments