Repository navigation
DefectDojo Hook v5.3.0 fails with Java Error #3414
Description
🐞 Bug report
Describe the bug
When running DefectDojo Hook in v5.3.0 were getting this error
Steps To Reproduce
- Install Hook in v5.3.0
- Run any scan
Expected behavior
works
System (please complete the following information):
- secureCodeBox v5.3.0
- Kubernetes Version 1.33
Screenshots / Logs
2025-12-10 09:41:35 INFO DefectDojoPersistenceProvider:83 - Starting DefectDojo persistence provider
2025-12-10 09:41:38 INFO DefectDojoPersistenceProvider:99 - Downloading Scan Result
2025-12-10 09:41:39 INFO DefectDojoPersistenceProvider:104 - Uploading Findings to DefectDojo at: https://defectdojo.example.com
Exception in thread "main" java.lang.IncompatibleClassChangeError: Class org.springframework.http.HttpHeaders does not implement the requested interface org.springframework.util.MultiValueMap
at org.springframework.http.HttpHeaders.isEmpty(HttpHeaders.java:1898)
at org.springframework.web.client.RestTemplate$HttpEntityRequestCallback.doWithRequest(RestTemplate.java:947)
at org.springframework.web.client.RestTemplate.doExecute(RestTemplate.java:752)
at org.springframework.web.client.RestTemplate.execute(RestTemplate.java:715)
at org.springframework.web.client.RestTemplate.exchange(RestTemplate.java:580)
at io.securecodebox.persistence.defectdojo.service.GenericDefectDojoService.internalSearch(GenericDefectDojoService.java:123)
at io.securecodebox.persistence.defectdojo.service.GenericDefectDojoService.search(GenericDefectDojoService.java:139)
at io.securecodebox.persistence.defectdojo.service.GenericDefectDojoService.search(GenericDefectDojoService.java:152)
at io.securecodebox.persistence.strategies.VersionedEngagementsStrategy.run(VersionedEngagementsStrategy.java:82)
at io.securecodebox.persistence.DefectDojoPersistenceProvider.execute(DefectDojoPersistenceProvider.java:107)
at io.securecodebox.persistence.DefectDojoPersistenceProvider.main(DefectDojoPersistenceProvider.java:65)Additional context
Might have also been broken in v5.2.0, we skipped the release in our env :(
Metadata
Metadata
Assignees
Type
Projects
- Status
Activity
J12934 commentedon Dec 10, 2025
Probably broken due to this Update: #3390
kaz-33 commentedon Dec 12, 2025
I confirm that it works, the workaround used is the image from the previous version in your workload:
docker.io/securecodebox/hook-persistence-defectdojo:5.0.0@sha256:22916fef50100ecd68a1ba2ffe5c4206e28e957ac7f805749a4de3b997f4033c
Weltraumschaf commentedon Dec 17, 2025
This must be reverted and Dependabot configured to not upgrade Spring to v 7.
secureCodeBox#3414 Set dep to lower version to solve the issue with …
#3414 Set dep to lower version to solve the issue with the Defectdoj…