Repository navigation
Update dependency org.springframework.boot:spring-boot-devtools to v3.4.0 - #34
Open
mend-for-github-com[bot] wants to merge 1 commit into
Mend for GitHub.com / WhiteSource Security Check
failed
Oct 22, 2026 in 3m 33s
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|
CVE-2026-40972Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.springframework.boot/spring-boot-devtools/3.4.0/6d2467240ab3a196d9f68ff8a410efeb0c45dd2d/spring-boot-devtools-3.4.0.pom Dependency Hierarchy: -> ❌ spring-boot-devtools-3.4.0.jar (Vulnerable Library) |
 High |
7.5 | Direct spring-boot-devtools-3.4.0.jar |
spring-boot-devtools-3.4.0.jar | 3.4.16 | None |
Base branch total remaining vulnerabilities: 155
Base branch commit: null
Total libraries scanned: 62
Scan token: e44d335885ff48a0b646e25c3a7f7e3c
Loading