Details
-
Bug
-
Status: Closed (View Workflow)
-
TBD
-
Resolution: Done
-
None
-
None
-
-
Spring Force
-
TBD
Description
Update spring-boot-starter-parent from 2.3.4.RELEASE to 2.6.4. This bumps sub-dependency org.postgresql:postgresql from 42.2.16 to 42.3.3 fixing Remote Code Execution (RCE): https://nvd.nist.gov/vuln/detail/CVE-2022-21724
Update folio-spring-base from 1.0.0 to 4.0.0.
Update openapi-generator from 4.3.1 to 5.4.0.
Update mapstruct from 1.3.1.Final to 1.4.2.Final.
Update org.json:json from 20200518 to 20211205.
Remove postgresql-embedded. It has been unmaintained for a long time and can be replaced by testcontainers: https://github.com/yandex-qatools/postgresql-embedded#embedded-postgresql-server