CORE-69: bump tomcat-embed-core (#1024)

davidangb · web-flow · commit 98293f6f4cbc · 2025-06-16T16:03:45.000-04:00
bump tomcat-embed-core
diff --git a/service/build.gradle b/service/build.gradle
@@ -148,6 +148,10 @@ dependencies {
         implementation('commons-beanutils:commons-beanutils:1.11.0') {
             because("CVE-2025-48734")
         }
+        // tomcat-embed-core is included by Spring Boot
+        implementation('org.apache.tomcat.embed:tomcat-embed-core:10.1.42') {
+            because("CVE-2025-48988")
+        }
     }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -148,6 +148,10 @@ dependencies {`
`148`	`148`	`implementation('commons-beanutils:commons-beanutils:1.11.0') {`
`149`	`149`	`because("CVE-2025-48734")`
`150`	`150`	`}`
	`151`	`+ // tomcat-embed-core is included by Spring Boot`
	`152`	`+ implementation('org.apache.tomcat.embed:tomcat-embed-core:10.1.42') {`
	`153`	`+ because("CVE-2025-48988")`
	`154`	`+ }`
`151`	`155`	`}`
`152`	`156`	`}`
`153`	`157`