Update flow to 23.5.3

[vaadin-bot]

No description provided.

[github-actions]

Dependencies Report

• 🟠 Known Vulnerabilities:

  • Vulnerabilities in: pkg:npm/[email protected] [CVE-2024-26467] (oss-bomber)
    👌 This is coming from the tools, @cyclonedx/cyclonedx-npm, we have used for sbom module, FP for us.
    ·
    • Vulnerabilities in: pkg:npm/[email protected] [CVE-2023-29827] (oss-bomber)
      👌 NOTE: this is disputed by the vendor because the render function is not intended to be used with untrusted input. More detail: EJS, Server side template injection [email protected] Latest mde/ejs#720 (comment)
      ·
    • Vulnerabilities in: pkg:maven/com.fasterxml.jackson.core/[email protected] [CVE-2023-35116] (owasp)
      👌 based on the issue this is not a CVE Stack overflow error caused by serialization of Map with cyclic dependency -- NOT CVE FasterXML/jackson-databind#3972
      · cpe:2.3:a:fasterxml:jackson-databind::::::::

• 🚫 Vulnerabilities:

  • Vulnerabilities in: pkg:maven/org.springframework/[email protected] [CVE-2024-22262, CVE-2016-1000027, CVE-2024-22259] (osv-bomber,osv-scan,owasp)
    · cpe:2.3:a:org.springframework:spring-web:5.3.32:::::::*
    · cpe:2.3:a:vmware:spring_framework::::::::
    • Vulnerabilities in: pkg:maven/org.apache.tomcat.embed/[email protected] [CVE-2024-34750] (osv-bomber,osv-scan)
      ·
    • Vulnerabilities in: pkg:npm/[email protected] [CVE-2024-34394, CVE-2024-34393] (osv-bomber,oss-bomber,osv-scan)
      ·
    • Vulnerabilities in: pkg:npm/[email protected] [CVE-2024-39249] (oss-bomber)
      ·
    • Vulnerabilities in: pkg:npm/[email protected] [CVE-2024-4067] (oss-bomber)
      ·
    • Vulnerabilities in: pkg:maven/org.apache.tomcat/[email protected] [CVE-2024-34750] (osv-scan)
      ·

• 📔 No License Issues

[Click for more Details]