Spring CVE-2020-36518 : Unable to resolve WhiteSource vulnerability for jackson-databind library

I have tried all the versions of jackson-databind (including version suggested on whitesource fix), but all the version ...

Spring Introduce @AliasFor attribute type conversion

Suppose that I have multiple ExecutorService beans to apply them within @Async annotation. Here is the pools configurati...

Spring Improve diagnostics in SpEL for large array creation

Backport of gh-28145Comment From: Maarten-DamenHi @jhoeller, Am I correctly assuming that this is the fix for CVE-2022-2...

Spring AntPathMatcher matches path with trailing slash differently if '**' is present in the pattern

I'm curious why AntPathMatcher matches a path with a trailing slash differently if the pattern contains a ** pattern. Se...

Spring Fix debug log for no matching acceptableTypes

Comment From: pivotal-cla@GatinMI Please sign the Contributor License Agreement!Click here to manually synchronize the s...

Spring SimpleUrlHandlerMapping invokes HandlerInterceptor twice

SimpleUrlHandlerMapping is causing double call of HandlerInterceptor. This is related to https://github.com/spring-proje...

Spring PathMatchingResourcePatternResolver does not always work with JAR manifest class paths

Affects: Spring Framework 5.2.2When trying to find a class from the class path using PathMatchingResourcePatternResolver...

Spring Add application/graphql+json Media type and MIME type constants

While MimeTypeUtils and MediaType are not meant to thoroughly list all types, or even commonly used types - those classe...

Spring AbstractListenerReadPublisher does not call ServletOutputStream::isReady() when reading chunked data across network packets

When a client POSTs data using chunked encoding, and a network packet ends immediately after the chunk header, but befor...

Spring BOM is missing for 5.3.18

The Maven artifact for spring-framework-bom 5.3.18 is missing from Maven Central. This prevents a quick update for proje...

Spring blacklist "module" property for "class" to mitigate Spring4Shell

In CachedIntrospectionResults there area there is a small snippet that blacklists 2 properties if (Class.clas...

Spring Where can I check the version comparison of spring framework corresponding to spring boot

Affects: \Comment From: wuaoyaWhere can I check the version comparison of spring framework corresponding to spring boot,...

Spring {*path} pattern (CaptureTheRestPathElement) includes undocumented leading slash in @PathVariable path

Affects: Spring Framework 5.2.15, 5.3.8In both Web MVC and WebFlux, @RequestMapping via PathPattern supports a pattern l...

Spring 注释文件

ggComment From: pivotal-cla@lianyiwuming Please sign the Contributor License Agreement!Click here to manually synchroniz...

Spring Refine PropertyDescriptor filtering

Restrict property paths under Class and properties of typesClassLoader or ProtectionDomain.Closes gh-28260Comment From: ...

Spring Improve diagnostics in SpEL for large array creation

Attempting to create a large array in a SpEL expression can result in an OutOfMemoryError. Although the JVM recovers fro...

Spring Resolve Principal argument only when not annotated

ServletRequestMethodArgumentResolver happend early in the ArgumentResolver chain. One of his ability is to resolve Princ...

Spring IllegalStateException is thrown due to a lack of Kotlin nullable support in Spring Messaging

Library versionsspring-boot-starter-amqp: 2.6.3spring-messaging: 5.3.15kotlin: 1.6.10kotlin-stdlib: 1.6.10kotlint-reflec...

Spring Support setting threadNamePrefix in the <task:executor> XML tag [SPR-9737]

Archie Cobbs opened SPR-9737 and commentedThe &lt;task:executor id="foo"&gt; XML element automatically sets the thread n...

Spring Ability to specify default-lazy-init behavior for imported bean definitions [SPR-5146]

Eric Sirianni opened SPR-5146 and commentedThere doesn't seem to be a way to configure Spring so that imported bean defi...
上一页 下一页
.