-
Notifications
You must be signed in to change notification settings - Fork 1
Pull requests: getyourguide/openapi-validation-java
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
USPR-13801: pin org.springframework:spring-expression to 7.0.8 (GHSA-9f52-rjqv-25qv)
risk:low
small
#402
opened Jul 31, 2026 by
midnight-clue
Bot
Loading…
7 tasks done
USPR-13802: fix spring-webmvc and spring-webflux open redirect vulnerability (GHSA-h3qp-gqrc-q736)
risk:low
risk:normal
x-small
#400
opened Jul 31, 2026 by
midnight-clue
Bot
Loading…
USPR-13806: bump spring-boot to 4.0.7 to fix spring framework dos vulnerability
risk:low
x-small
#399
opened Jul 31, 2026 by
midnight-clue
Bot
Loading…
3 tasks done
USPR-13797: bump spring-boot to 4.0.7 to fix spring-webmvc XSS vulnerability
risk:low
x-small
#398
opened Jul 31, 2026 by
midnight-clue
Bot
Loading…
2 tasks done
USPR-13805: bump spring-boot to 4.0.7 to patch spring-webmvc/spring-webflux path traversal (GHSA-72pg-x5f8-j25j)
risk:low
x-small
#397
opened Jul 31, 2026 by
midnight-clue
Bot
Loading…
3 tasks done
USPR-13807: bump spring-boot to 4.0.7 to resolve spring-webmvc/spring-webflux information disclosure vulnerability
risk:low
x-small
#396
opened Jul 31, 2026 by
midnight-clue
Bot
Loading…
3 tasks done
USPR-13804: fix(deps): force spring-expression minimum version to 7.0.8 (GHSA-wxpp-56q6-5pcg)
risk:low
x-small
#395
opened Jul 31, 2026 by
midnight-clue
Bot
Loading…
4 tasks done
USPR-13808: bump Spring Boot to 4.0.7 to resolve spring-webflux to 7.0.8 (GHSA-83f7-v6px-pp3h)
risk:low
x-small
#394
opened Jul 31, 2026 by
midnight-clue
Bot
Loading…
USPR-13800: enforce patched spring-expression version (GHSA-r5w3-xv2f-j59q)
risk:low
risk:normal
x-small
#393
opened Jul 31, 2026 by
midnight-clue
Bot
Loading…
6 tasks done
USPR-13798: bump spring-boot to 4.0.7 to resolve Spring Framework multipart request smuggling (GHSA-cjpg-rgq5-fr37)
risk:low
x-small
#392
opened Jul 31, 2026 by
midnight-clue
Bot
Loading…
3 tasks done
USPR-13767: bump forced io.netty version to 4.2.16.Final
risk:low
small
#390
opened Jul 30, 2026 by
midnight-clue
Bot
Loading…
2 tasks done
USPR-13769: bump pinned Netty to 4.2.16.Final for GHSA-c69g-56f8-xwqj
risk:low
small
#389
opened Jul 30, 2026 by
midnight-clue
Bot
Loading…
2 tasks done
USPR-13772: bump io.netty minimum version to 4.2.16.Final for GHSA-hpcc-26xq-25fv
risk:low
small
x-small
#388
opened Jul 30, 2026 by
midnight-clue
Bot
Loading…
2 tasks done
USPR-13770: bump io.netty minimum version to 4.2.16.Final
risk:low
small
x-small
#386
opened Jul 30, 2026 by
midnight-clue
Bot
Loading…
4 tasks done
USPR-13771: bump forced netty version to 4.2.16.Final for GHSA-4mp9-239f-g9hg
risk:low
x-small
#384
opened Jul 30, 2026 by
midnight-clue
Bot
Loading…
2 tasks done
USPR-13776: bump io.netty resolutionStrategy override to 4.2.16.Final
risk:low
small
#383
opened Jul 30, 2026 by
midnight-clue
Bot
Loading…
3 tasks done
USPR-13773: force io.netty to >= 4.2.16.Final to fix CORS short-circuit security bypass
risk:low
x-small
#382
opened Jul 30, 2026 by
midnight-clue
Bot
Loading…
2 tasks done
USPR-13768: bump io.netty resolution override to 4.2.16.Final
risk:low
small
#381
opened Jul 30, 2026 by
midnight-clue
Bot
Loading…
4 tasks done
USPR-13774: bump io.netty vulnerability floor to 4.2.16.Final
risk:low
small
#380
opened Jul 30, 2026 by
midnight-clue
Bot
Loading…
3 tasks done
build(deps): bump gradle-wrapper from 9.4.1 to 9.5.1
chk
dependencies
Pull requests that update a dependency file
java
Pull requests that update Java code
#356
opened May 5, 2026 by
dependabot
Bot
Loading…
build(deps): bump io.swagger.core.v3:swagger-annotations from 2.2.46 to 2.2.49
chk
dependencies
Pull requests that update a dependency file
java
Pull requests that update Java code
#355
opened May 5, 2026 by
dependabot
Bot
Loading…
build(deps): bump org.openapi.generator from 7.21.0 to 7.22.0
chk
dependencies
Pull requests that update a dependency file
java
Pull requests that update Java code
#354
opened May 5, 2026 by
dependabot
Bot
Loading…
build(deps): bump org.springframework.boot from 4.0.5 to 4.0.6
chk
dependencies
Pull requests that update a dependency file
java
Pull requests that update Java code
#353
opened Apr 27, 2026 by
dependabot
Bot
Loading…
build(deps): bump commons-codec:commons-codec from 1.21.0 to 1.22.0
chk
dependencies
Pull requests that update a dependency file
java
Pull requests that update Java code
#352
opened Apr 27, 2026 by
dependabot
Bot
Loading…
build(deps): bump org.projectlombok:lombok from 1.18.44 to 1.18.46
chk
dependencies
Pull requests that update a dependency file
java
Pull requests that update Java code
#351
opened Apr 27, 2026 by
dependabot
Bot
Loading…
Previous Next
ProTip!
Updated in the last three days: updated:>2026-07-28.