From 6908a81e87aaf475be5c4f0ec865007607da9079 Mon Sep 17 00:00:00 2001
From: Silvestre Zabala <silvestre.zabala@sap.com>
Date: Thu, 31 Mar 2022 16:19:05 +0200
Subject: [PATCH] CVE-2022-22965: Update to Spring Framework 5.3.18

see https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement#status
---
 src/scheduler/pom.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/scheduler/pom.xml b/src/scheduler/pom.xml
index 8954474fcd..59acbba817 100644
--- a/src/scheduler/pom.xml
+++ b/src/scheduler/pom.xml
@@ -19,6 +19,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <java.version>1.8</java.version>
         <io.prometheus.simpleclient.version>0.15.0</io.prometheus.simpleclient.version>
+        <spring-framework.version>5.3.18</spring-framework.version> <!-- CVE-2022-22965, see https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement#status -->
     </properties>
 
     <dependencies>