Skip to content

Commit b30879e

Browse files
committed
fix(java-template): update Spring Boot 3.4.5 + Tomcat 10.1.45 for CVE fixes
- CVE-2025-24813 (CRITICAL): Tomcat RCE/information disclosure - CVE-2025-48988, CVE-2025-48989, CVE-2025-55752 (HIGH): Tomcat DoS/traversal - CVE-2025-22235 (HIGH): Spring Boot actuator endpoint matcher - CVE-2025-41249 (HIGH): Spring Core annotation detection
1 parent c8894f9 commit b30879e

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

templates/java-service/pom.xml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
<parent>
88
<groupId>org.springframework.boot</groupId>
99
<artifactId>spring-boot-starter-parent</artifactId>
10-
<version>3.4.1</version>
10+
<version>3.4.5</version>
1111
<relativePath/>
1212
</parent>
1313

@@ -20,6 +20,8 @@
2020
<properties>
2121
<java.version>21</java.version>
2222
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
23+
<!-- Override Tomcat version to fix CVE-2025-24813, CVE-2025-48988, CVE-2025-48989, CVE-2025-55752 -->
24+
<tomcat.version>10.1.45</tomcat.version>
2325
</properties>
2426

2527
<dependencies>

0 commit comments

Comments
 (0)