As per the security team’s recommendation, I proceeded with upgrading the org.springframework:spring-web library from version 5.3.31 to version 6.0.0. However, after implementing this upgrade, we encountered an issue where the application failed to start properly.
Our application is built on Jmix version 1.5.3, and we’re currently investigating this issue to understand its root cause. Our team is actively working to resolve it swiftly, ensuring that we maintain both the security and functionality of our application.
I wanted to keep you informed about our progress in addressing these security concerns. Rest assured, we are prioritizing this matter and taking the necessary steps to mitigate the issue.
Below screenshot from our security team
