Hacker News new | ask | show | jobs
by hrpnk 1543 days ago
https://spring.io/blog/2022/03/31/spring-framework-rce-early...

"[11:59 BST] Spring Framework versions 5.3.18 and 5.2.20, which address the vulnerability, are now available on Maven Central. The release process for Spring Boot is in progress, but applications can already upgrade their Spring Framework version independently in order to be protected."