robert-gdv

Make Checksum-Update downwards compatible

17

### Search first - [X] I searched and no similar issues were found ### Description We updated our Spring Boot Server from Liquibase 4.20.0 to 4.24.0. There was no new...

CVE-2024-7254 potential Denial of Service issue in protobuf-java

3

Sonatype reports [CVE-2024-7254](https://nvd.nist.gov/vuln/detail/CVE-2024-7254) on io.prometheus : prometheus-metrics-shaded-protobuf with a [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Score of 8.7](https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N). It is reported, that all Versions of prometheus-metrics-shaded-protobuf until 1.3.1 included are affected. There is currently no...