Hello Spring Cloud Config Team,
There is a CVE (CVE-2023-4759) in org.eclipse.jgit:org.eclipse.jgit
version 6.4.0.202211300538-r
that you are using in spring-cloud-config-server.
It has been fixed since their version 6.6.1.202309021850-r
in september 2023.
Do you plan on fixing it in one of your 4.0.x releases ?
Thank you in advance