Spring Boot needs to be updated

thecodeteam / ecs-cf-service-broker

Cloud Foundry Service Broker for EMC ECS Object Storage

Apache License 2.0

29 stars 28 forks source link

Spring Boot needs to be updated #154

Closed rogalv closed 4 years ago

rogalv commented 4 years ago

Version 2.0.0 is based on Spring Boot 2.2.5 which is on its own already vulnerable due to a number of CVEs reported for Tomcat. Latest versions are 2.2.9/2.3.2.