GIScience / openrouteservice

🌍 The open source route planner api with plenty of features.
https://openrouteservice.org
GNU General Public License v3.0
1.33k stars 379 forks source link

fix: Fix some CVEs #1788

Closed MichaelsJP closed 1 month ago

MichaelsJP commented 1 month ago

spring-web 6.0.14 6.0.18 java-archive GHSA-hgjh-9rj2-g67j High
spring-web 6.0.14 6.0.17 java-archive GHSA-ccgv-vj62-xf9h High
tomcat-embed-core 10.1.16 10.1.19 java-archive GHSA-7w75-32cg-r6g2 Medium
tomcat-embed-websocket 10.1.16 10.1.19 java-archive GHSA-v682-8vv8-vpwr Medium libcrypto3 3.1.4-r5 3.1.4-r6 apk CVE-2024-2511 Unknown
libssl3 3.1.4-r5 3.1.4-r6 apk CVE-2024-2511 Unknown

The spring-boot and junit fixes resolve the first four. The container update fixes the lower two.

Pull Request Checklist

Fixes # .

Information about the changes

Examples and reasons for differences between live ORS routes, and those generated from this pull request

-

Required changes to ors config (if applicable)

-

sonarcloud[bot] commented 1 month ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud