[YARN-11389] Upgrade spring-core to 5.3.20 in wro4j-maven-plugin

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 3.4.0
• Component/s: build, yarn-ui-v2
• Labels: pull-request-available transitive-cve
• Assignee: D M Murali Krishna Reddy
• Reporter: D M Murali Krishna Reddy
• Created: 06/Dec/22 09:51
• Updated: 09/Dec/22 17:43

Description

Currently during yarn-ui build we are using vulnerable version of spring-core-3.1.1.RELEASE.jar which has serveral critical and high vulnerablilites, we need to upgrade to a version 5.3.20+

Issue Links

• relates to: TEZ-4461 Upgrade spring-core to 5.3.20 in wro4j-maven-plugin
• links to: GitHub Pull Request #5192