spring-projects / spring-plugin

Apache License 2.0
444 stars 119 forks source link

Is springfox affected by the spring framework cve-2022-22965 vulnerability #84

Closed qwer02224 closed 2 years ago

qwer02224 commented 2 years ago

-version 2.0.0 Release

https://nvd.nist.gov/vuln/detail/CVE-2022-22965

schauder commented 2 years ago

For your convenience, here's the blog post outlining all details regarding the CVE: https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement#am-i-impacted