Background

spring-security-rsa 1.1.2

Compile dependency bcprov-jdk18on 1.77 has a recently published CVE.

Please upgrade dependency bcprov-jdk18on to 1.78 or above in spring-security-rsa.

• SNYK-JAVA-ORGBOUNCYCASTLE-6612984
• SNYK-JAVA-ORGBOUNCYCASTLE-6613076

Related ticket:

• https://github.com/spring-cloud/spring-cloud-config/issues/2405