From 00aef0e41e13ee8788e65723ac348c3efab5d910 Mon Sep 17 00:00:00 2001 From: Heisson Willen Date: Fri, 7 Feb 2025 12:46:55 +0100 Subject: [PATCH 1/2] fix: update org.springframework.boot to 3.2.9 due to CVE-2024-38807 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index b9f32429d..8dc89fd4f 100644 --- a/pom.xml +++ b/pom.xml @@ -4,7 +4,7 @@ org.springframework.boot spring-boot-starter-parent - 3.2.3 + 3.2.9 From e67d1ca492a69a766ff97886998f1b1617301702 Mon Sep 17 00:00:00 2001 From: Heisson Willen Date: Fri, 7 Feb 2025 12:52:17 +0100 Subject: [PATCH 2/2] docs: update changelog --- CHANGELOG.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index ff584a875..8bea8ff38 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), ## [Unreleased] ## [6.3.0] - 2025-02-03 +### Fixed +- Fix high level CVE (CVE-2024-38807) + ### Fixed - fix chart publish failure ### Added