search

Javen205 / IJPay

IJPay 让支付触手可及，封装了微信支付、QQ支付、支付宝支付、京东支付、银联支付、PayPal 支付等常用的支付方式以及各种常用的接口。不依赖任何第三方 mvc 框架，仅仅作为工具使用简单快速完成支付模块的开发，可轻松嵌入到任何系统里。右上角点下小星星✨
http://javen205.gitee.io/ijpay
Apache License 2.0
5.42k stars 1.34k forks source link

fix(sec): upgrade org.springframework.boot:spring-boot-autoconfigure to 3.0.7 #72

Closed realize096 closed 9 months ago

realize096 commented 1 year ago

What happened？

There are 1 security vulnerabilities found in org.springframework.boot:spring-boot-autoconfigure 2.7.5

What did I do？

Upgrade org.springframework.boot:spring-boot-autoconfigure from 2.7.5 to 3.0.7 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

How can we automate the detection of these types of issues?

By using the GitHub Actions configurations provided by murphysec, we can conduct automatic code security checks in our CI pipeline.

The specification of the pull request

PR Specification from OSCS