Merge pull request #102 from bci-oss/bugfix/fix-CVE-2023-20863-spring…

…-core

Update spring-core to version 6.0.8

pom.xml

@@ -234,8 +234,20 @@
 						<groupId>org.springframework.boot</groupId>
 						<artifactId>spring-boot-starter-logging</artifactId>
 					</exclusion>
+					<!-- Exlude spring-core because of CVE-2023-20863 (spring-core in version 6.0.7) -->
+					<exclusion>
+						<groupId>org.springframework</groupId>
+						<artifactId>spring-core</artifactId>
+					</exclusion>
 				</exclusions>
 			</dependency>
+			<!-- add explicit dependency spring-expression because of CVE-2023-20863 (spring-core in version 6.0.7).
+			Remove after spring-boot-starter-web includes the newest version of spring-expression-->
+			<dependency>
+				<groupId>org.springframework</groupId>
+				<artifactId>spring-core</artifactId>
+				<version>6.0.8</version>
+			</dependency>
 
 			<!-- logging -->
 			<dependency>