Upgrades the 'org.springframework:spring-web' dependency from version 5.3.31 to 5.3.39 to incorporate upstream security patches and harden the application against known vulnerabilities present in prior versions. The updated version is expected to remediate several acknowledged issues of critical and high impact, as identified by industry security advisories and automated tooling, thereby reducing overall application exposure.

Justification

• The spring-web dependency is a core framework component frequently targeted by attackers.

• The updated version specifically addresses several known vulnerabilities, including critical ones confirmed by advisories (e.g., GHSA-4wrc-f8pq-fpqp), which could otherwise be exploited if left unpatched.

• Security-driven updates to foundational dependencies significantly reduce supply chain and application vulnerabilities.

• The score reflects both the severity of previously existing vulnerabilities and the importance of timely patching.

  BenchmarkJava/pom.xml

  Line 1236 in 59ca38a

  <version.springframework>5.3.39</version.springframework>