From 1c7390de9c10a19e7aad1736587faeceb4ce1515 Mon Sep 17 00:00:00 2001 From: Markus Strehle <11627201+strehle@users.noreply.github.com> Date: Fri, 3 Sep 2021 00:21:49 +0200 Subject: [PATCH] update jakarta.el CVE-2021-28170 see https://github.com/eclipse-ee4j/el-ri/issues/155 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 940bd971fe35..557e661fa2f3 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -336,7 +336,7 @@ bom { ] } } - library("Glassfish EL", "3.0.3") { + library("Glassfish EL", "3.0.4") { prohibit("[4.0.0-RC1,)") { because "it uses the jakarta.* namespace" }