From b68bcbbd1ff359dc781bcc488e7406abb45af4e9 Mon Sep 17 00:00:00 2001
From: Rujun Chen <rujche@microsoft.com>
Date: Tue, 13 Jan 2026 09:19:02 +0800
Subject: [PATCH] Fix CVE about spring-core

---
 eng/versioning/external_dependencies.txt              | 1 -
 sdk/keyvault/azure-security-test-keyvault-jca/pom.xml | 6 ------
 2 files changed, 7 deletions(-)

diff --git a/eng/versioning/external_dependencies.txt b/eng/versioning/external_dependencies.txt
index 23b7c99a3af9..747747416a74 100644
--- a/eng/versioning/external_dependencies.txt
+++ b/eng/versioning/external_dependencies.txt
@@ -98,7 +98,6 @@ org.openrewrite.recipe:rewrite-recipe-bom;3.22.0
 ## Spring boot dependency versions
 org.springframework.boot:spring-boot-maven-plugin;2.7.18
 org.springframework.boot:spring-boot-starter;2.7.18
-org.springframework:spring-core;5.3.32
 org.springframework.boot:spring-boot-starter-parent;2.7.18
 
 
diff --git a/sdk/keyvault/azure-security-test-keyvault-jca/pom.xml b/sdk/keyvault/azure-security-test-keyvault-jca/pom.xml
index 5152884ca34e..6910dedb00f1 100644
--- a/sdk/keyvault/azure-security-test-keyvault-jca/pom.xml
+++ b/sdk/keyvault/azure-security-test-keyvault-jca/pom.xml
@@ -55,12 +55,6 @@
       <version>1.7.36</version> <!-- {x-version-update;org.slf4j:slf4j-nop;external_dependency} -->
       <scope>test</scope>
     </dependency>
-    <dependency>
-      <groupId>org.springframework</groupId>
-      <artifactId>spring-core</artifactId>
-      <version>5.3.32</version> <!-- {x-version-update;org.springframework:spring-core;external_dependency} -->
-      <scope>test</scope>
-    </dependency>
     <dependency>
       <groupId>com.azure</groupId>
       <artifactId>azure-core-test</artifactId>