Repository navigation
Update dependency org.springframework.boot:spring-boot-starter-web to v4 - autoclosed - #30
Closed
mend-for-github-com[bot] wants to merge 1 commit into
Mend for GitHub.com / WhiteSource Security Check
succeeded
Aug 24, 2026 in 4m 24s
Security Report
✔️ 👍 You have successfully remediated 100 vulnerabilities in this branch:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2026-54515 | jackson-databind-2.18.0.jar |
| CVE-2025-31650 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-40992 | spring-boot-autoconfigure-3.3.5.jar |
| CVE-2026-1225 | logback-core-1.5.11.jar |
| CVE-2026-41001 | spring-boot-autoconfigure-3.3.5.jar |
| CVE-2024-50379 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-22741 | spring-webmvc-6.1.14.jar |
| CVE-2026-59084 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-54512 | jackson-databind-2.17.2.jar |
| CVE-2026-40973 | spring-boot-3.3.5.jar |
| CVE-2026-34487 | tomcat-embed-core-10.1.31.jar |
| CVE-2025-46701 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-42498 | tomcat-embed-core-10.1.31.jar |
| CVE-2025-48988 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-59889 | jackson-databind-2.18.0.jar |
| CVE-2026-41848 | spring-core-6.1.14.jar |
| CVE-2026-54514 | jackson-databind-2.18.0.jar |
| CVE-2026-40974 | spring-boot-autoconfigure-3.3.5.jar |
| CVE-2025-48976 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-41851 | spring-expression-6.1.14.jar |
| CVE-2026-40477 | thymeleaf-3.1.2.RELEASE.jar |
| CVE-2026-49844 | log4j-api-2.23.1.jar |
| CVE-2025-49125 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-22740 | spring-web-6.1.14.jar |
| CVE-2026-59888 | jackson-databind-2.17.2.jar |
| CVE-2025-11226 | logback-core-1.5.11.jar |
| CVE-2025-24813 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-40977 | spring-boot-3.3.5.jar |
| CVE-2026-68494 | jackson-core-2.17.2.jar |
| CVE-2026-29145 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-59888 | jackson-databind-2.18.0.jar |
| CVE-2026-19880 | logback-classic-1.5.11.jar |
| CVE-2026-40478 | thymeleaf-3.1.2.RELEASE.jar |
| CVE-2026-68494 | jackson-core-2.18.0.jar |
| CVE-2025-41249 | spring-core-6.1.14.jar |
| CVE-2025-41242 | spring-beans-6.1.14.jar |
| CVE-2026-54513 | jackson-databind-2.17.2.jar |
| CVE-2026-54513 | jackson-databind-2.18.0.jar |
| CVE-2026-41852 | spring-expression-6.1.14.jar |
| CVE-2026-41293 | tomcat-embed-core-10.1.31.jar |
| CVE-2025-22233 | spring-context-6.1.14.jar |
| CVE-2026-40975 | spring-boot-3.3.5.jar |
| CVE-2026-24880 | tomcat-embed-core-10.1.31.jar |
| CVE-2025-31651 | tomcat-embed-core-10.1.31.jar |
| CVE-2024-56337 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-29146 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-41842 | spring-webmvc-6.1.14.jar |
| CVE-2025-48989 | tomcat-embed-core-10.1.31.jar |
| CVE-2024-12801 | logback-core-1.5.11.jar |
| CVE-2026-41284 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-9828 | logback-core-1.5.11.jar |
| CVE-2026-43512 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-54515 | jackson-databind-2.17.2.jar |
| CVE-2026-41901 | thymeleaf-3.1.2.RELEASE.jar |
| CVE-2026-41846 | spring-webmvc-6.1.14.jar |
| CVE-2026-41845 | spring-web-6.1.14.jar |
| CVE-2025-48924 | commons-lang3-3.17.0.jar |
| CVE-2025-41242 | spring-webmvc-6.1.14.jar |
| CVE-2025-22235 | spring-boot-3.3.5.jar |
| CVE-2025-49124 | tomcat-embed-core-10.1.31.jar |
| CVE-2025-41234 | spring-web-6.1.14.jar |
| CVE-2026-40477 | thymeleaf-spring6-3.1.2.RELEASE.jar |
| CVE-2026-54512 | jackson-databind-2.18.0.jar |
| CVE-2025-48924 | commons-lang3-3.14.0.jar |
| CVE-2026-40478 | thymeleaf-spring6-3.1.2.RELEASE.jar |
| CVE-2026-25854 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-13006 | logback-core-1.5.11.jar |
| CVE-2024-12798 | logback-classic-1.5.11.jar |
| CVE-2026-34483 | tomcat-embed-core-10.1.31.jar |
| CVE-2025-55752 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-43515 | tomcat-embed-core-10.1.31.jar |
| CVE-2025-66614 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-54514 | jackson-databind-2.17.2.jar |
| CVE-2025-52520 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-10532 | logback-core-1.5.11.jar |
| CVE-2026-59083 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-41843 | spring-webmvc-6.1.14.jar |
| CVE-2026-18401 | jackson-core-2.18.0.jar |
| CVE-2026-43514 | tomcat-embed-core-10.1.31.jar |
| CVE-2024-12798 | logback-core-1.5.11.jar |
| CVE-2026-41845 | spring-webmvc-6.1.14.jar |
| CVE-2026-41841 | spring-webmvc-6.1.14.jar |
| CVE-2026-41853 | spring-webmvc-6.1.14.jar |
| CVE-2026-41839 | spring-web-6.1.14.jar |
| CVE-2026-41853 | spring-web-6.1.14.jar |
| CVE-2026-41901 | thymeleaf-spring6-3.1.2.RELEASE.jar |
| CVE-2025-53506 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-22737 | spring-webmvc-6.1.14.jar |
| CVE-2025-55668 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-43513 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-41840 | spring-web-6.1.14.jar |
| CVE-2026-22735 | spring-webmvc-6.1.14.jar |
| CVE-2026-22735 | spring-web-6.1.14.jar |
| CVE-2026-41850 | spring-expression-6.1.14.jar |
| CVE-2025-61795 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-24734 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-41844 | spring-webmvc-6.1.14.jar |
| CVE-2026-22745 | spring-webmvc-6.1.14.jar |
| CVE-2025-55754 | tomcat-embed-core-10.1.31.jar |
| CVE-2026-18401 | jackson-core-2.17.2.jar |
Base branch total remaining vulnerabilities: 101
Base branch commit: null
Total libraries scanned: 5
Scan token: dc25899dd7314dd1870aa8ab76b59f6b
Loading