This Week in Sprng - March 4th, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring , and Happy Devnexus 2025 to those who celebrate! That's right sports fans, I'm off to awesome Atlanta, Georgia later today for Devnexus, one of the world's largest annual gatherings of Java community and luminaries alike. I'l...

io.github.artemy-osipov.thrift:rest-bridge-micronaut (0.4.0), net.javacrumbs.shedlock:shedlock-micronaut (4.23.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.4.2)

io.micronaut:micronaut-http-server-netty MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - io.github.artemy-osipov.thrift:rest-bridge-micronaut 0.4.0 -...

net.javacrumbs.shedlock:shedlock-micronaut (4.21.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.3.4)

io.micronaut:micronaut-http-server-netty MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - net.javacrumbs.shedlock:shedlock-micronaut 4.21.0 Source cves: CVE-2024-23639...

io.micronaut.acme:micronaut-acme (3.0.0-rc1), net.javacrumbs.shedlock:shedlock-micronaut (4.25.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.8)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - io.micronaut.acme:micronaut-acme 3.0.0-rc1 -...

io.micronaut.acme:micronaut-acme (3.0.0-rc1), io.micronaut:micronaut-function-web (2.5.8) +2 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.5.8)

io.micronaut:micronaut-http-server MAVEN version 2.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.acme:micronaut-acme 3.0.0-rc1 - io.micronaut:micronaut-function-web 2.5.8 -...

com.github.seratch:jslack-lightning-micronaut (>=3.1.1, <=3.4.2), net.javacrumbs.shedlock:shedlock-micronaut (>=4.0.0, <=4.8.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (1.2.6)

io.micronaut:micronaut-http-server-netty MAVEN version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.github.seratch:jslack-lightning-micronaut =3.1.1, =4.0.0, =4.8.0 Source cve...

com.slack.api:bolt-micronaut (>=1.10.0, <=1.15.0), io.micronaut.acme:micronaut-acme (>=3.0.0, <=3.0.1) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.12)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut =1.10.0, =3.0.0, =3.0.1 -...

com.slack.api:bolt-micronaut (1.0.7), net.javacrumbs.shedlock:shedlock-micronaut (>=4.9.0, <=4.12.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (1.3.4)

io.micronaut:micronaut-http-server-netty MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.0.7 - net.javacrumbs.shedlock:shedlock-micronaut...

com.slack.api:bolt-micronaut (1.7.1), net.javacrumbs.shedlock:shedlock-micronaut (>=4.22.0, <=4.22.1) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.4.1)

io.micronaut:micronaut-http-server-netty MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.7.1 - net.javacrumbs.shedlock:shedlock-micronaut...

com.github.seratch:jslack-lightning-micronaut (>=3.1.1, <=3.4.2), net.javacrumbs.shedlock:shedlock-micronaut (>=4.0.0, <=4.8.0) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.2.6)

io.micronaut:micronaut-http-server-netty MAVEN version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.github.seratch:jslack-lightning-micronaut =3.1.1, =4.0.0, =4.8.0 Source cve...

com.slack.api:bolt-micronaut (1.0.7), net.javacrumbs.shedlock:shedlock-micronaut (>=4.9.0, <=4.12.0) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.3.4)

io.micronaut:micronaut-http-server-netty MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.0.7 - net.javacrumbs.shedlock:shedlock-micronaut...