[GitHub] [skywalking] linghengqian opened a new issue, #8801: [Feature] Mention Spring's baseline version to 5.3.18 in webapp dependencies

[GitBox <gi...@apache.org>]

linghengqian opened a new issue, #8801:
URL: https://github.com/apache/skywalking/issues/8801

   ### Search before asking
   
   - [X] I had searched in the [issues](https://github.com/apache/skywalking/issues?q=is%3Aissue) and found no similar feature requirement.
   
   
   ### Description
   
   Referring to https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement, I would like to mention Spring's baseline version to 5.3.18  in webapp dependencies to avoid an early stage RCE warning issue.
   
   ### Use case
   
   Mention Spring's baseline version to 5.3.18 in webapp dependencies.
   
   ### Related issues
   
   No.
   
   ### Are you willing to submit a PR?
   
   - [X] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@skywalking.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [skywalking] wu-sheng closed issue #8801: [Feature] Bump up Spring's core version to 5.3.18 in webapp dependencies

[GitBox <gi...@apache.org>]

wu-sheng closed issue #8801: [Feature] Bump up Spring's core version to 5.3.18 in webapp dependencies
URL: https://github.com/apache/skywalking/issues/8801


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@skywalking.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org