Repository navigation
spring-cloud-starter-netflix-eureka-client:4.3.0 has vulnerability with dependency httpclient:4.5.3 #4445
Description
httpclient:4.5.3 has vulnerability:
https://mvnrepository.com/artifact/org.apache.httpcomponents/httpclient/4.5.3
to fix the issue upgrade to httpclient:4.5.14
Activity
OlgaMaciaszek commentedon Jun 6, 2025
Hello, @ziad-saade. As you can see in the dependency tree, it is not our dependency. It's brought transitively by Netflix/Eureka. I have created a PR there: Netflix/eureka#1598, but dependency issues for that project can be registered there directly and PRs can be submitted to get the change in.
ziad-saade commentedon Jun 7, 2025
Good morning @OlgaMaciaszek
Thanks for the PR.