From ae320e05249c480b36f47c56d1232063b3c5d97b Mon Sep 17 00:00:00 2001
From: Ankita Srivastava <ankita.srivastava@hmcts.net>
Date: Tue, 21 Oct 2025 13:05:01 +0100
Subject: [PATCH 1/2] CCD-6278

---
 dependency-check-suppressions.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/dependency-check-suppressions.xml b/dependency-check-suppressions.xml
index 23586e17e0..c085a6bbd5 100644
--- a/dependency-check-suppressions.xml
+++ b/dependency-check-suppressions.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?><suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
   <suppress>
     <notes>Temporary Suppression
-        CVE-2024-38820 refer [Ticket]
+
         CVE-2025-48734 refer [https://tools.hmcts.net/jira/browse/CCD-6458]
         CVE-2024-22259 refer [https://tools.hmcts.net/jira/browse/CCD-6489]
         CVE-2024-38808 refer [https://tools.hmcts.net/jira/browse/CCD-6507]
@@ -14,7 +14,7 @@
         CVE-2025-55668 refer [https://tools.hmcts.net/jira/browse/CCD-6675]
         CVE-2023-51074 refer [https://tools.hmcts.net/jira/browse/CCD-6797]
     </notes>
-    <cve>CVE-2024-38820</cve>
+
     <cve>CVE-2025-48734</cve>
     <cve>CVE-2024-22259</cve>
     <cve>CVE-2024-38808</cve>
@@ -27,4 +27,4 @@
     <cve>CVE-2025-55668</cve>
     <cve>CVE-2023-51074</cve>
   </suppress>
-</suppressions>
\ No newline at end of file
+</suppressions>

From 38b4e25ad464015382e868ed80949977da7d8387 Mon Sep 17 00:00:00 2001
From: Ankita Srivastava <ankita.srivastava@hmcts.net>
Date: Tue, 21 Oct 2025 13:27:59 +0100
Subject: [PATCH 2/2] CCD-6278

---
 build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 4baa56da1b..8590cd81a5 100644
--- a/build.gradle
+++ b/build.gradle
@@ -30,7 +30,7 @@ def versions = [
 ]
 
 ext['spring-security.version'] = '5.7.11'
-ext['spring-framework.version'] = '5.3.27'
+ext['spring-framework.version'] = '5.3.40'
 ext['jackson.version'] = '2.16.0'
 //overriding for easy access to the version for FT testing
 ext['beftaFwVersion'] = '9.2.4'