Outdated dependency: SpringFramework (4.3.20 instead of 4.3.19) - Githubissues

Asqatasun / Contrast-Finder

Contrast-Finder finds correct color contrasts (background / foreground) for web accessibility (a11y, WCAG, RGAA). https://app.contrast-finder.org

GNU Affero General Public License v3.0

55 stars 18 forks source link

Outdated dependency: SpringFramework (4.3.20 instead of 4.3.19) #192

Closed dzc34 closed 5 years ago

dzc34 commented 5 years ago

Observed behaviour

Outdated dependency: SpringFramework

Expected behaviour

upgrade springframework 4.3.20 (Release date: October 15, 2018) instead of 4.3.19

https://spring.io/blog/2018/10/15/spring-framework-5-1-1-5-0-10-and-4-3-20-available-now
https://spring.io/blog/2018/10/16/spring-project-vulnerability-reports-published
- CVE-2018-15756: DoS Attack via Range Requests: https://pivotal.io/security/cve-2018-15756
https://spring.io/projects/spring-framework
- Release Notes – SpringFramework 4.3.20
- Jira issues - Fixed by 4.3.20