search

springside / springside4

A Spring Framework based, pragmatic style JavaEE application reference architecture.
http://www.springside.io
Apache License 2.0
5.72k stars 2.91k forks source link

fix(sec): upgrade ch.qos.logback:logback-classic to 1.2.0 #592

Open Super-Sky opened 2 years ago

Super-Sky commented 2 years ago

What happened？

There are 1 security vulnerabilities found in ch.qos.logback:logback-classic 1.1.8

What did I do？

Upgrade ch.qos.logback:logback-classic from 1.1.8 to 1.2.0 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS