spring-cloud / spring-cloud/spring-cloud-netflix
spring-cloud-starter-netflix-eureka-client:4.3.0 has vulnerability with dependency httpclient:4.5.3
Open
@OlgaMaciaszek is already working on this.
Since Jun 6, 2025.
blocked - external
dependencies
- Dominant language
- Java
- Stars
- 5k
- Forks
- 2.5k
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 10
Description
httpclient:4.5.3 has vulnerability:
https://mvnrepository.com/artifact/org.apache.httpcomponents/httpclient/4.5.3
to fix the issue upgrade to httpclient:4.5.14
@OlgaMaciaszek
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.