[Snyk] Fix for 1 vulnerabilities

[macroscope-cloud]

Snyk has created this PR to fix 1 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• examples/iOS-Hybrid-App-Java-Server/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Deserialization of Untrusted Data SNYK-JAVA-ORGSPRINGFRAMEWORK-18326609	746	org.springframework.boot:spring-boot-starter-json: 3.5.5 -> 3.5.15 org.springframework:spring-web: 6.2.10 -> 6.2.19 org.springframework:spring-webmvc: 6.2.10 -> 6.2.19 No Known Exploit

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Deserialization of Untrusted Data

[macroscope-cloud]

This is a set of patch-level upgrades for Spring Boot and the underlying Spring Framework. The changes consist almost entirely of bug fixes, dependency upgrades, and a significant number of security patches.

Key Points:

• spring-boot-starter-json (3.5.5 → 3.5.15): This update brings in newer dependencies, including patches for the Jackson library. The changes are focused on stability and security.
• spring-web & spring-webmvc (6.2.10 → 6.2.19): These updates address numerous security vulnerabilities (CVEs), including potential for Denial of Service (DoS), path traversal, cross-site scripting (XSS), and unsafe deserialization. For example, a new security feature was added to the Jackson JMS converter to limit trusted packages for deserialization (CVE-2026-41855).

No breaking API changes are documented in this version range. The updates are designed to be safe drop-in replacements. No developer action is expected.

Source: Spring Boot & Spring Framework Release Announcements

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.