From f4d63297702bd0a58719a12a7c7f7fffb25d405e Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 30 Jan 2026 14:36:06 +0000
Subject: [PATCH] fix:
 spring-security-modules/spring-security-mvc-socket/pom.xml & pom.xml to
 reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-CHQOSLOGBACK-15062482
---
 pom.xml                                                    | 6 +++---
 spring-security-modules/spring-security-mvc-socket/pom.xml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/pom.xml b/pom.xml
index 24d9fd1d0bfc..15de8db9945d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -263,7 +263,7 @@
                                         </goals>
                                     </pluginExecutionFilter>
                                     <action>
-                                        <ignore></ignore>
+                                        <ignore/>
                                     </action>
                                 </pluginExecution>
                                 <pluginExecution>
@@ -282,7 +282,7 @@
                                         </goals>
                                     </pluginExecutionFilter>
                                     <action>
-                                        <ignore></ignore>
+                                        <ignore/>
                                     </action>
                                 </pluginExecution>
                             </pluginExecutions>
@@ -1342,7 +1342,7 @@
 
         <!-- logging -->
         <org.slf4j.version>1.7.30</org.slf4j.version>
-        <logback.version>1.2.3</logback.version>
+        <logback.version>1.5.25</logback.version>
 
         <!-- plugins -->
         <!-- can't upgrade the plugin yet; as there is an issue with 2.22 no longer running all the tests-->
diff --git a/spring-security-modules/spring-security-mvc-socket/pom.xml b/spring-security-modules/spring-security-mvc-socket/pom.xml
index ff8cc708e30a..b6a96f7f3f44 100644
--- a/spring-security-modules/spring-security-mvc-socket/pom.xml
+++ b/spring-security-modules/spring-security-mvc-socket/pom.xml
@@ -184,7 +184,7 @@
         <hibernate-core.version>5.2.10.Final</hibernate-core.version>
         <spring-security.version>4.2.3.RELEASE</spring-security.version>
         <spring-data-jpa.version>1.11.3.RELEASE</spring-data-jpa.version>
-        <logback-classic.version>1.2.3</logback-classic.version>
+        <logback-classic.version>1.5.25</logback-classic.version>
     </properties>
 
 </project>
\ No newline at end of file