[Question] Is there a plan to fix the vulnerabilities in the dependency software? #1497
Closed as not planned
Description
Search before asking
- I had searched in the issues and found no similar issues.
Question
- CVE-2023-39017 in Quartz 2.3.2，API misuse of
org.quartz.jobs.ee.jms.SendQueueMessageJob.executewould lead the code injection vulnerability. quartz-scheduler/quartz#943 - Other Vulnerabilities in Spring Boot's dependent software