[NIFI-13032] Upgrade Spring Framework to 6.1.6

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0-M3
• Component/s: Core Framework, MiNiFi, NiFi Registry
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 12/Apr/24 16:19
• Updated: 13/Apr/24 08:17
• Resolved: 13/Apr/24 08:17

Description

Spring Framework dependencies should be upgraded to 6.1.6 to incorporate several bug fixes and improvements. Bug fixes include a resolution for CVE-2024-22262, which relates to parsing URLs using the Spring UriComponentsBuilder class.

Issue Links

• links to: GitHub Pull Request #8635