Skip to content

Vulnerability fix#463

Merged
robmoffat merged 9 commits into
finos:spring-bot-masterfrom
deutschebank:spring-bot-master-db
Jun 20, 2025
Merged

Vulnerability fix#463
robmoffat merged 9 commits into
finos:spring-bot-masterfrom
deutschebank:spring-bot-master-db

Conversation

@vaibhav-db
Copy link
Copy Markdown
Contributor

No description provided.

@vaibhav-db vaibhav-db requested a review from robmoffat June 11, 2025 09:29
@vaibhav-db vaibhav-db requested a review from robmoffat June 13, 2025 07:59
@robmoffat
Copy link
Copy Markdown
Member

Hi @vaibhav-db ,

Looks like one last one:

teams-chat-workflow-spring-boot-starter-10.0.2-SNAPSHOT.jar (pkg:maven/org.finos.springbot/teams-chat-workflow-spring-boot-starter@10.0.2-SNAPSHOT, cpe:2.3:a:microsoft:teams:10.0.2:snapshot:*:*:*:*:*:*): CVE-2020-10146(5.4)

@vaibhav-db
Copy link
Copy Markdown
Contributor Author

@robmoffat check now

@robmoffat
Copy link
Copy Markdown
Member

Sorry Vaibhav still happening!

claim-bot-10.0.2-SNAPSHOT.jar: tomcat-embed-core-10.1.40.jar (pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.40, cpe:2.3:a:apache:tomcat:10.1.40:*:*:*:*:*:*:*, cpe:2.3:a:apache_tomcat:apache_tomcat:10.1.40:*:*:*:*:*:*:*): CVE-2025-49125(6.300000190734863), CVE-2025-48988(8.699999809265137)

@robmoffat
Copy link
Copy Markdown
Member

oh man, this is never ending! 😢

@robmoffat robmoffat merged commit 4696e4d into finos:spring-bot-master Jun 20, 2025
1 check passed
@robmoffat
Copy link
Copy Markdown
Member

💯 🎈 🥳

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants