You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We have received multiple CVE tickets against Spring-Core used in grails services where the grails-gradle-plugin is a must have: CVE-2023-20860 CVE-2023-20863
However we are not able to override the SpringBoot/SpringFramework version because of the dependency import from the plugin dominates the versions.
Please provide configurations to manually set the dependency versions to resolve CVEs as necessary, or if it is configurable instructions are deeply appreciated.
The text was updated successfully, but these errors were encountered:
We have received multiple CVE tickets against Spring-Core used in grails services where the grails-gradle-plugin is a must have:
CVE-2023-20860
CVE-2023-20863
However we are not able to override the SpringBoot/SpringFramework version because of the dependency import from the plugin dominates the versions.
Please provide configurations to manually set the dependency versions to resolve CVEs as necessary, or if it is configurable instructions are deeply appreciated.
The text was updated successfully, but these errors were encountered: