latest spring-boot-starter-test version is 3.3.4 SpringBoot spring-boot-starter-test:3.3.4  has a dependency on xmlunit-core version 2.9.1 that has a vulnerability issue

Depend on xmlunit-core version 2.9.1 that has one vulnerability: SpringBoot spring-boot-starter-test:3.3.4  has a dependency on xmlunit-core version 2.9.1 that has a vulnerability issue

to resolve the issue upgrade xmlunit-core to 2.10.0.

Comment From: snicoll

We've upgraded to 2.10.0 in 3.4, see https://github.com/spring-projects/spring-boot/issues/41429

We won't upgrade to a new feature release of XMLUnit in a maintenance release of Spring Boot, see https://github.com/spring-projects/spring-boot/issues/41029.

Comment From: ziad-saade

thank you @snicoll for the clarification.