spring-projects/spring-security 5.1.11.RELEASE

on GitHub

⭐ New Features

• HTTP Host header attack #8641

🪲 Bug Fixes

• Remove unused field 'digester' in Md4PasswordEncoder #8577
• ACL : AclImpl.hashCode leads to StackOverflowError #8571
• Blocking in WebSessionServerCsrfTokenRepository #8546
• Fix AntPathRequestMatcher Javadoc #8528
• Document NoOpPasswordEncoder will not be removed #8523
• Fix non-standard HTTP method for CsrfWebFilter #8517

🔨 Dependency Upgrades

• Update to okhttp 3.12.12 #8635
• Update to jaxb-impl 2.3.3 #8634
• Update to mockwebserver 3.12.12 #8633
• Update to Spring Boot 2.1.14.RELEASE #8632