search

grails / grails-gradle-plugin

Apache License 2.0
6 stars 9 forks source link

Support for configuring SpringBoot/SpringFramework version #189

Open koww opened 1 year ago

koww commented 1 year ago

We have received multiple CVE tickets against Spring-Core used in grails services where the grails-gradle-plugin is a must have: CVE-2023-20860 CVE-2023-20863 However we are not able to override the SpringBoot/SpringFramework version because of the dependency import from the plugin dominates the versions.

Please provide configurations to manually set the dependency versions to resolve CVEs as necessary, or if it is configurable instructions are deeply appreciated.

koww commented 1 year ago

Or do we have any release date available for 6.x versions?