List view

Security Patch: Vulnerability introduced by org.springframework.boot:spring-boot-starter-actuator@3.2.0

patchUpdate internal dependenciesUpdate internal dependencies

securityVulnerability foundVulnerability found

Status: Closed (completed).

#255 In switcherapi/switcher-ac;

· by petruki was closed on Dec 4, 2023

Security Patch: Vulnerability introduced by org.springframework.boot:spring-boot-starter-web@3.3.2

patchUpdate internal dependenciesUpdate internal dependencies

Status: Closed (completed).

#280 In switcherapi/switcher-ac;

· by petruki was closed on Aug 18, 2024

Security Patch: Vulnerability introduced by org.springframework:spring-webmvc@6.1.12

patchUpdate internal dependenciesUpdate internal dependencies

Status: Closed (completed).

#286 In switcherapi/switcher-ac;

· by petruki was closed on Sep 19, 2024

Bump joda-time@2.14.0, gson@2.13.0, springdoc@2.8.6

Status: Merged (completed).

switcherapi/switcher-acnumber 297

#297 In switcherapi/switcher-ac;

· by petruki was closed on Apr 15, 2025

Refactored for native image support builds

Status: Merged (completed).

switcherapi/switcher-acnumber 290

#290 In switcherapi/switcher-ac;

· by petruki was closed on Dec 4, 2024

Fixed circular dependency, added reachability metadata for native build

enhancementNew feature or requestNew feature or request

Status: Merged (completed).

switcherapi/switcher-acnumber 293

#293 In switcherapi/switcher-ac;

· by petruki was closed on Dec 9, 2024

Patched vulnerability introduced by tomcat-embed (TOCTOU) Race Condition

patchUpdate internal dependenciesUpdate internal dependencies

securityVulnerability foundVulnerability found

Status: Merged (completed).

switcherapi/switcher-acnumber 295

#295 In switcherapi/switcher-ac;

· by petruki was closed on Dec 22, 2024

Bump to Spring Boot 3.4.1, patched SSRF vulnerability

patchUpdate internal dependenciesUpdate internal dependencies

securityVulnerability foundVulnerability found

Status: Merged (completed).

switcherapi/switcher-acnumber 294

#294 In switcherapi/switcher-ac;

· by petruki was closed on Dec 21, 2024

Bump switcher-client@2.2.2, refactor service config

Status: Merged (completed).

switcherapi/switcher-acnumber 291

#291 In switcherapi/switcher-ac;

· by petruki was closed on Dec 6, 2024

Replaced jersey dependency by native java HttpClient

enhancementNew feature or requestNew feature or request

Status: Merged (completed).

switcherapi/switcher-acnumber 292

#292 In switcherapi/switcher-ac;

· by petruki was closed on Dec 8, 2024

Bump Springboot@3.4.3

Status: Merged (completed).

switcherapi/switcher-acnumber 296

#296 In switcherapi/switcher-ac;

· by petruki was closed on Feb 22, 2025

Bump spring-boot@3.3.3, cleaned managed dependencies

Status: Merged (completed).

switcherapi/switcher-acnumber 284

#284 In switcherapi/switcher-ac;

· by petruki was closed on Aug 23, 2024

Replaced configuration classes to use records instead

enhancementNew feature or requestNew feature or request

Status: Merged (completed).

switcherapi/switcher-acnumber 283

#283 In switcherapi/switcher-ac;

· by petruki was closed on Aug 23, 2024

Refactored DTOs to use Java records

enhancementNew feature or requestNew feature or request

Status: Merged (completed).

switcherapi/switcher-acnumber 285

#285 In switcherapi/switcher-ac;

· by petruki was closed on Sep 6, 2024

Bump spring-boot@3.3.2 and other deps

Status: Merged (completed).

switcherapi/switcher-acnumber 278

#278 In switcherapi/switcher-ac;

· by petruki was closed on Jul 25, 2024

Bump Springboot@3.3.4 - added compilation support to native-image

Status: Merged (completed).

switcherapi/switcher-acnumber 288

#288 In switcherapi/switcher-ac;

· by petruki was closed on Oct 5, 2024

Closes #286 - patches org.springframework:spring-webmvc@6.1.13

patchUpdate internal dependenciesUpdate internal dependencies

securityVulnerability foundVulnerability found

Status: Merged (completed).

switcherapi/switcher-acnumber 287

#287 In switcherapi/switcher-ac;

· by petruki was closed on Sep 19, 2024

Added sanitizer for GitHub auth code

securityVulnerability foundVulnerability found

Status: Merged (completed).

switcherapi/switcher-acnumber 279

#279 In switcherapi/switcher-ac;

· by petruki was closed on Aug 9, 2024

Patched spring-security-config@6.3.2

patchUpdate internal dependenciesUpdate internal dependencies

securityVulnerability foundVulnerability found

Status: Merged (completed).

switcherapi/switcher-acnumber 282

#282 In switcherapi/switcher-ac;

· by petruki was closed on Aug 21, 2024

Closes #280 - Patched spring-web@6.1.12

patchUpdate internal dependenciesUpdate internal dependencies

securityVulnerability foundVulnerability found

Status: Merged (completed).

switcherapi/switcher-acnumber 281

#281 In switcherapi/switcher-ac;

· by petruki was closed on Aug 18, 2024

Bump Spring Boot @ 3.3.5

patchUpdate internal dependenciesUpdate internal dependencies

Status: Merged (completed).

switcherapi/switcher-acnumber 289

#289 In switcherapi/switcher-ac;

· by petruki was closed on Oct 30, 2024

Patched Spring Security to 6.2.2 - Fixes auth bypass (CVE-2024-22234)

patchUpdate internal dependenciesUpdate internal dependencies

securityVulnerability foundVulnerability found

Status: Merged (completed).

switcherapi/switcher-acnumber 264

#264 In switcherapi/switcher-ac;

· by petruki was closed on Feb 22, 2024

Patch vulnerability introduced by Spring Web 3.2.2 (CVE-2024-22243)

patchUpdate internal dependenciesUpdate internal dependencies

securityVulnerability foundVulnerability found

Status: Merged (completed).

switcherapi/switcher-acnumber 265

#265 In switcherapi/switcher-ac;

· by petruki was closed on Feb 29, 2024

Bump switcher-client SDK to 2.0.6

Status: Merged (completed).

switcherapi/switcher-acnumber 266

#266 In switcherapi/switcher-ac;

· by petruki was closed on Mar 14, 2024

Fixed security issues (JWT refactor, Dockerfile user)

securityVulnerability foundVulnerability found

Status: Merged (completed).

switcherapi/switcher-acnumber 267

#267 In switcherapi/switcher-ac;

· by petruki was closed on Mar 15, 2024