[IGNITE-16784] spring4shell CVE means spring upgrades needed

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Ignite Flags: Docs Required, Release Notes Required
• Assignee: Unassigned
• Reporter: PJ Fanning
• Created: 02/Apr/22 00:01
• Updated: 05/Apr/22 12:17
• Resolved: 05/Apr/22 12:17

Description

https://github.com/apache/ignite/blob/master/parent/pom.xml - spring 5.2 version should at least be considered for upgrade

https://www.helpnetsecurity.com/2022/04/01/cve-2022-22965/

Issue Links

• duplicates: IGNITE-16781 Upgrade org.springframework:spring-core for CVE-2022-22965 (a.k.a. Spring4Shell)