search

anji-plus / captcha

行为验证码(滑动拼图、点选文字)，前后端(java)交互，包含h5/Android/IOS/flutter/uni-app的源码和实现
https://captcha.anji-plus.com/
Apache License 2.0
1.41k stars 324 forks source link

fix(sec): upgrade org.springframework:spring-web to 5.2.15.RELEASE #176

Open ChengDaqi2023 opened 1 year ago

ChengDaqi2023 commented 1 year ago

What happened？

There are 1 security vulnerabilities found in org.springframework:spring-web 5.0.16.RELEASE

What did I do？

Upgrade org.springframework:spring-web from 5.0.16.RELEASE to 5.2.15.RELEASE for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

How can we automate the detection of these types of issues?

By using the GitHub Actions configurations provided by murphysec, we can conduct automatic code security checks in our CI pipeline.

The specification of the pull request

PR Specification from OSCS