I can see CVE-2016-1000027 has a vulnurability for spring web versions below 6.0.0. Im looking for a dependency fix in java 8 version as spring web 6.0 is only compatible with java 17

CodePudding user response：

Actually, even the latest 5.x version of spring still get this issue. I try to upgrade to 6.0 and upgrade my java to 17 and now new errors occurs.

CodePudding user response：

In my office also facing same issue, the code scanner failed due any spring boot deps required spring web 5, and we tried to migrate to spring boot 3 and now its working fine. this article my help you also: https://javatechonline.com/how-to-migrate-spring-boot-2-to-spring-boot-3/