Vulnerabilities	8 via 250 paths
Dependencies	103
Source	GitHub
Commit	011f2c37

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications

Issue type

Vulnerabilities
8
License issues
5

Severity

Critical
2
High
2
Medium
6
Low
3

Status

Open
13
Patched
0
Ignored
0

critical severity

Missing Authorization

Vulnerable module: org.springframework.security:spring-security-web
Introduced through: org.springframework.security:spring-security-web@6.1.9

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.

Overview

org.springframework.security:spring-security-web is a package within Spring Security that provides security services for the Spring IO Platform.

Affected versions of this package are vulnerable to Missing Authorization allowing Spring Security authorization rules to be bypassed for static resources.

Note:

Non-Static Resources Are Not Affected by this vulnerability. This is because handlers for these routes use predicates to validate the requests even if all security filters are bypassed.

Spring Security states that for this to impact an application, all of the following conditions must be met:

It must be a WebFlux application.
It must be using Spring's static resources support.
It must have a non-permitAll authorization rule applied to the static resources support.

Remediation

Upgrade org.springframework.security:spring-security-web to version 5.7.13, 5.8.15, 6.2.7, 6.3.4 or higher.

References

Missing Authorization vulnerability report

critical severity

new

Authentication Bypass by Primary Weakness

Vulnerable module: org.springframework.security:spring-security-crypto
Introduced through: org.springframework.security:spring-security-crypto@6.1.9, org.springframework.security:spring-security-core@6.1.9 and others

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-crypto@6.1.9

Remediation: Upgrade to org.springframework.security:spring-security-crypto@6.3.8.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-core@6.1.9 › org.springframework.security:spring-security-crypto@6.1.9

Remediation: Upgrade to org.springframework.security:spring-security-core@6.3.8.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework.security:spring-security-crypto@6.1.9

Remediation: Upgrade to org.springframework.security:spring-security-config@6.3.8.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework.security:spring-security-crypto@6.1.9

Remediation: Upgrade to org.springframework.security:spring-security-web@6.3.8.

…and 1 more

Overview

org.springframework.security:spring-security-crypto is a spring-security-crypto library for Spring Security.

Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the BCryptPasswordEncoder.matches() function, which only takes the first 72 characters for comparison. Passwords longer than this will incorrectly return true when compared against other strings sharing the same first 72 characters, making them easier to brute force.

Note: Patches have also been issued for older versions of Enterprise Support packages.

Remediation

Upgrade org.springframework.security:spring-security-crypto to version 6.3.8, 6.4.4 or higher.

References

Authentication Bypass by Primary Weakness vulnerability report

high severity

Denial of Service (DoS)

Vulnerable module: com.fasterxml.jackson.core:jackson-core
Introduced through: com.fasterxml.jackson.core:jackson-core@2.14.0, com.fasterxml.jackson.core:jackson-databind@2.18.3 and others

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › com.fasterxml.jackson.core:jackson-core@2.14.0

Remediation: Upgrade to com.fasterxml.jackson.core:jackson-core@2.15.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › com.fasterxml.jackson.core:jackson-databind@2.18.3 › com.fasterxml.jackson.core:jackson-core@2.14.0

Remediation: Upgrade to com.fasterxml.jackson.core:jackson-databind@2.18.3.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.flywaydb:flyway-core@9.21.1 › com.fasterxml.jackson.dataformat:jackson-dataformat-toml@2.14.0 › com.fasterxml.jackson.core:jackson-databind@2.18.3 › com.fasterxml.jackson.core:jackson-core@2.14.0
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › com.fasterxml.jackson.core:jackson-databind@2.18.3 › com.fasterxml.jackson.core:jackson-core@2.14.0

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › com.fasterxml.jackson.core:jackson-databind@2.18.3 › com.fasterxml.jackson.core:jackson-core@2.14.0

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springdoc:springdoc-openapi-starter-common@2.2.0 › io.swagger.core.v3:swagger-core-jakarta@2.2.15 › com.fasterxml.jackson.core:jackson-databind@2.18.3 › com.fasterxml.jackson.core:jackson-core@2.14.0
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springdoc:springdoc-openapi-starter-common@2.2.0 › io.swagger.core.v3:swagger-core-jakarta@2.2.15 › com.fasterxml.jackson.dataformat:jackson-dataformat-yaml@2.15.1 › com.fasterxml.jackson.core:jackson-databind@2.18.3 › com.fasterxml.jackson.core:jackson-core@2.14.0

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.5.0.

…and 4 more

Overview

com.fasterxml.jackson.core:jackson-core is a Core Jackson abstractions, basic JSON streaming API implementation

Affected versions of this package are vulnerable to Denial of Service (DoS) due to missing input size validation when performing numeric type conversions. A remote attacker can exploit this vulnerability by causing the application to deserialize data containing certain numeric types with large values, causing the application to exhaust all available resources.

Details

Denial of Service (DoS) describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users.

Unlike other vulnerabilities, DoS attacks usually do not aim at breaching security. Rather, they are focused on making websites and services unavailable to genuine users resulting in downtime.

One popular Denial of Service vulnerability is DDoS (a Distributed Denial of Service), an attack that attempts to clog network pipes to the system by generating a large volume of traffic from many machines.

When it comes to open source libraries, DoS vulnerabilities allow attackers to trigger such a crash or crippling of the service by using a flaw either in the application code or from the use of open source libraries.

Two common types of DoS vulnerabilities:

High CPU/Memory Consumption- An attacker sending crafted requests that could cause the system to take a disproportionate amount of time to process. For example, commons-fileupload:commons-fileupload.
Crash - An attacker sending crafted requests that could cause the system to crash. For Example, npm ws package

Remediation

Upgrade com.fasterxml.jackson.core:jackson-core to version 2.15.0-rc1 or higher.

References

Denial of Service (DoS) vulnerability report

high severity

Improper Input Validation

Vulnerable module: com.fasterxml.jackson.dataformat:jackson-dataformat-toml
Introduced through: org.flywaydb:flyway-core@9.21.1

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.flywaydb:flyway-core@9.21.1 › com.fasterxml.jackson.dataformat:jackson-dataformat-toml@2.14.0

Remediation: Upgrade to org.flywaydb:flyway-core@9.21.2.

Overview

Affected versions of this package are vulnerable to Improper Input Validation when parsing maliciously crafted TOML data due to improper validation of nesting depth. This vulnerability is exploitable when the parser is running on user-supplied input and might cause the parser to crash by Stackoverflow.

Remediation

Upgrade com.fasterxml.jackson.dataformat:jackson-dataformat-toml to version 2.15.0 or higher.

References

Improper Input Validation vulnerability report

medium severity

Uncontrolled Resource Consumption

Vulnerable module: commons-io:commons-io
Introduced through: commons-fileupload:commons-fileupload@1.5 and org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › commons-fileupload:commons-fileupload@1.5 › commons-io:commons-io@2.11.0
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springdoc:springdoc-openapi-starter-common@2.2.0 › io.swagger.core.v3:swagger-core-jakarta@2.2.15 › commons-io:commons-io@2.11.0

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0.

Overview

commons-io:commons-io is a The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.

Affected versions of this package are vulnerable to Uncontrolled Resource Consumption through the XmlStreamReader class. An attacker can cause the application to consume excessive CPU resources by sending specially crafted XML content.

Remediation

Upgrade commons-io:commons-io to version 2.14.0 or higher.

References

Uncontrolled Resource Consumption vulnerability report

medium severity

new

Dual license: EPL-1.0, LGPL-2.1

Module: ch.qos.logback:logback-classic
Introduced through: org.springframework.boot:spring-boot-starter-actuator@3.4.4, org.springframework.boot:spring-boot-starter-jdbc@3.4.4 and others

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-starter-logging@3.4.4 › ch.qos.logback:logback-classic@1.5.18
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-starter-logging@3.4.4 › ch.qos.logback:logback-classic@1.5.18
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-starter-logging@3.4.4 › ch.qos.logback:logback-classic@1.5.18
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-starter-logging@3.4.4 › ch.qos.logback:logback-classic@1.5.18
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-starter-logging@3.4.4 › ch.qos.logback:logback-classic@1.5.18
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-starter-logging@3.4.4 › ch.qos.logback:logback-classic@1.5.18

…and 3 more

Dual license: EPL-1.0, LGPL-2.1

Dual license: EPL-1.0, LGPL-2.1 vulnerability report

medium severity

new

Dual license: EPL-1.0, LGPL-2.1

Module: ch.qos.logback:logback-core
Introduced through: org.springframework.boot:spring-boot-starter-actuator@3.4.4, org.springframework.boot:spring-boot-starter-jdbc@3.4.4 and others

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-starter-logging@3.4.4 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-starter-logging@3.4.4 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-starter-logging@3.4.4 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-starter-logging@3.4.4 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-starter-logging@3.4.4 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-starter-logging@3.4.4 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18

…and 3 more

Dual license: EPL-1.0, LGPL-2.1

Dual license: EPL-1.0, LGPL-2.1 vulnerability report

medium severity

new

EPL-1.0 license

Module: org.aspectj:aspectjweaver
Introduced through: org.springframework.boot:spring-boot-starter-data-jpa@3.4.4

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework:spring-aspects@6.2.5 › org.aspectj:aspectjweaver@1.9.22.1

EPL-1.0 license

EPL-1.0 license vulnerability report

medium severity

new

LGPL-2.1 license

Module: org.hibernate.common:hibernate-commons-annotations
Introduced through: org.springframework.boot:spring-boot-starter-data-jpa@3.4.4

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.hibernate.orm:hibernate-core@6.6.11.Final › org.hibernate.common:hibernate-commons-annotations@7.0.3.Final

LGPL-2.1 license

LGPL-2.1 license vulnerability report

medium severity

new

LGPL-2.1 license

Module: org.hibernate.orm:hibernate-core
Introduced through: org.springframework.boot:spring-boot-starter-data-jpa@3.4.4

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.hibernate.orm:hibernate-core@6.6.11.Final

LGPL-2.1 license

LGPL-2.1 license vulnerability report

low severity

Information Exposure

Vulnerable module: commons-codec:commons-codec
Introduced through: org.apache.httpcomponents:httpclient@4.5.14

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.apache.httpcomponents:httpclient@4.5.14 › commons-codec:commons-codec@1.11

Overview

commons-codec:commons-codec is a package that contains simple encoder and decoders for various formats such as Base64 and Hexadecimal.

Affected versions of this package are vulnerable to Information Exposure. When there is no byte array value that can be encoded into a string the Base32 implementation does not reject it, and instead decodes it into an arbitrary value which can be re-encoded again using the same implementation. This allows for information exposure exploits such as tunneling additional information via seemingly valid base 32 strings.

Remediation

Upgrade commons-codec:commons-codec to version 1.14 or higher.

References

Information Exposure vulnerability report

low severity

Improper Handling of Case Sensitivity

Vulnerable module: org.springframework:spring-context
Introduced through: org.springframework.security:spring-security-core@6.1.9, org.springframework.security:spring-security-config@6.1.9 and others

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-core@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-actuator@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springdoc:springdoc-openapi-starter-common@2.2.0 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.3.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.

…and 21 more

Overview

Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity due to String.toLowerCase() having some Locale dependent exceptions that could potentially result in fields not protected as expected.

Note:

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive.

This vulnerability was also fixed in commercial versions 5.3.41 and 6.0.25.

Remediation

Upgrade org.springframework:spring-context to version 6.1.14 or higher.

References

Improper Handling of Case Sensitivity vulnerability report

low severity

Improper Handling of Case Sensitivity

Vulnerable module: org.springframework:spring-core
Introduced through: org.springframework.security:spring-security-core@6.1.9, org.springframework.security:spring-security-config@6.1.9 and others

Detailed paths

Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-core@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-core@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-core@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-core@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-core@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-web@6.2.5 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-web@6.2.5 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework:spring-jdbc@6.2.5 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-core@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-core@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-web@6.2.5 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-web@6.2.5 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework:spring-jdbc@6.2.5 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-core@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-core@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-web@6.2.5 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework:spring-web@6.2.5 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework:spring-jdbc@6.2.5 › org.springframework:spring-tx@7.0.0-M3 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-tx@7.0.0-M3 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework:spring-jdbc@6.2.5 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework.data:spring-data-commons@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-orm@7.0.0-M3 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-core@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-web@6.2.5 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework:spring-web@6.2.5 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework:spring-jdbc@6.2.5 › org.springframework:spring-tx@7.0.0-M3 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-tx@7.0.0-M3 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework:spring-jdbc@6.2.5 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework.data:spring-data-commons@3.4.4 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-orm@7.0.0-M3 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-actuator@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-web@6.2.5 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework:spring-jdbc@6.2.5 › org.springframework:spring-tx@7.0.0-M3 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-orm@7.0.0-M3 › org.springframework:spring-tx@7.0.0-M3 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-orm@7.0.0-M3 › org.springframework:spring-jdbc@6.2.5 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-config@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-config@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.security:spring-security-web@6.1.9 › org.springframework.security:spring-security-core@6.1.9 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.security:spring-security-web@6.2.7.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-web@6.2.5 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework:spring-jdbc@6.2.5 › org.springframework:spring-tx@7.0.0-M3 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-orm@7.0.0-M3 › org.springframework:spring-tx@7.0.0-M3 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-orm@7.0.0-M3 › org.springframework:spring-jdbc@6.2.5 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-actuator@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springdoc:springdoc-openapi-starter-common@2.2.0 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.3.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-orm@7.0.0-M3 › org.springframework:spring-jdbc@6.2.5 › org.springframework:spring-tx@7.0.0-M3 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springframework:spring-webmvc@6.2.5 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.0.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-actuator@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.data:spring-data-jpa@3.4.4 › org.springframework:spring-orm@7.0.0-M3 › org.springframework:spring-jdbc@6.2.5 › org.springframework:spring-tx@7.0.0-M3 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-actuator@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-actuator@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springdoc:springdoc-openapi-starter-common@2.2.0 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.3.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-jdbc@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-actuator@3.4.4 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.4.4 › org.springframework.boot:spring-boot-actuator@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springdoc:springdoc-openapi-starter-common@2.2.0 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.3.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springdoc:springdoc-openapi-starter-common@2.2.0 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.3.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springdoc:springdoc-openapi-starter-common@2.2.0 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.3.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-expression@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springdoc:springdoc-openapi-starter-webmvc-ui@2.2.0 › org.springdoc:springdoc-openapi-starter-webmvc-api@2.2.0 › org.springdoc:springdoc-openapi-starter-common@2.2.0 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springdoc:springdoc-openapi-starter-webmvc-ui@2.8.3.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-data-jpa@3.4.4 › org.springframework.boot:spring-boot-starter-jdbc@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-data-jpa@3.4.4.
Introduced through: hmcts/ccd-user-profile-api@hmcts/ccd-user-profile-api#011f2c37f9acf2c18d34544d3c2c0708d29bc574 › org.springframework.boot:spring-boot-starter-web@3.4.4 › org.springframework.boot:spring-boot-starter-json@3.4.4 › org.springframework.boot:spring-boot-starter@3.4.4 › org.springframework.boot:spring-boot-autoconfigure@3.4.4 › org.springframework.boot:spring-boot@3.4.4 › org.springframework:spring-context@6.0.19 › org.springframework:spring-aop@6.0.19 › org.springframework:spring-beans@6.0.19 › org.springframework:spring-core@6.0.19

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.4.4.

…and 207 more

Overview

org.springframework:spring-core is a core package within the spring-framework that contains multiple classes and utilities.

Note:

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive.

This vulnerability was also fixed in commercial versions 5.3.41 and 6.0.25.

Remediation

Upgrade org.springframework:spring-core to version 6.1.14 or higher.

References

Improper Handling of Case Sensitivity vulnerability report

hmcts/ccd-user-profile-api

Vulnerabilities

Dependencies

Source

Commit

Find, fix and prevent vulnerabilities in your code.

critical severity

Missing Authorization

Detailed paths

Overview

Remediation

References

critical severity new

Authentication Bypass by Primary Weakness

Detailed paths

Overview

Remediation

References

high severity

Denial of Service (DoS)

Detailed paths

Overview

Details

Remediation

References

high severity

Improper Input Validation

Detailed paths

Overview

Remediation

References

medium severity

Uncontrolled Resource Consumption

Detailed paths

Overview

Remediation

References

medium severity new

Dual license: EPL-1.0, LGPL-2.1

Detailed paths

medium severity new

Dual license: EPL-1.0, LGPL-2.1

Detailed paths

medium severity new

EPL-1.0 license

Detailed paths

medium severity new

LGPL-2.1 license

Detailed paths

medium severity new

LGPL-2.1 license

Detailed paths

low severity

Information Exposure

Detailed paths

Overview

Remediation

References

low severity

Improper Handling of Case Sensitivity

Detailed paths

Overview

Remediation

References

low severity

Improper Handling of Case Sensitivity

Detailed paths

Overview

Remediation

References

critical severity

new

medium severity

new

medium severity

new

medium severity

new

medium severity

new

medium severity

new