[🐸 Frogbot] Update version of org.springframework:spring-webmvc to 6.1.14 #2

github-actions · Jun 27, 2025

Severity	ID	Contextual Analysis	Direct Dependencies	Impacted Dependency	Fixed Versions
Medium	CVE-2024-38828	Not Covered	org.springframework:spring-webmvc:5.3.39	org.springframework:spring-webmvc 5.3.39	[5.3.42]


Contextual Analysis:	Not Covered
Direct Dependencies:	org.springframework:spring-webmvc:5.3.39
Impacted Dependency:	org.springframework:spring-webmvc:5.3.39
Fixed Versions:	[5.3.42]
CVSS V3:	5.3

Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.

Upgrade org.springframework:spring-webmvc to 6.1.14

041b439

Provide feedback