Browse categories
Explore
Fiverr Pro
English
$
USD
I will audit and fix spring boot cve vulnerabilities in your java backend
Asad
About this gig
Got a SAST scan or Snyk report full of HIGH/CRITICAL CVEs and no idea where to start? That's exactly what I do.
I specialize in Spring Boot dependency security remediation upgrading vulnerable libraries (Spring Boot, Netty, ActiveMQ, Hibernate, and others) without breaking your application's business logic.
What you get:
- Full dependency tree analysis (Maven/Gradle)
- CVE-by-CVE remediation plan with risk assessment
- Safe version upgrades with compatibility checks
- Regression testing strategy to validate nothing breaks
- Clean changelog of every change made and why
Who this is for:
- Teams with a security audit deadline
- Startups that haven't touched dependencies in 2+ years
- Companies preparing for SOC2, PCI-DSS, or ISO 27001 certification
I've remediated 16+ high-severity CVEs across Spring Boot ecosystem dependencies in production systems. I don't just bump versions blindly I verify compatibility and document every decision.
Get to know Asad
Asad
- FromPakistan
- Member sinceFeb 2025
Languages
English
Senior Backend Java Developer | 4+ years in fintech, banking & ride-hailing.
Currently at Jeeny (Middle East ride-hailing app) — integrating airlines, hotels & events into a live super-app backend. Previously at I2C (global fintech), building Kafka microservices, Visa/Amex API integrations & real-time streaming APIs.
Specialties: Spring Boot · REST APIs · Kafka · OAuth2/JWT · Cassandra · MySQL · CVE Security
BSc Computer Science — NUST Islamabad.
Message me before ordering — I respond fast.
Other Software Development Services I Offer
FAQ
What do you need from me to get started?
Access to your pom.xml or build.gradle file and your current SAST/Snyk scan report if you have one. I can also run the scan myself if you share the codebase.
Will fixing CVEs break my application?
Not if done correctly. I verify compatibility of every version upgrade before applying it and document every change so you know exactly what was touched.
Do you sign NDAs?
Yes, happy to sign an NDA before you share any code.
What if new CVEs are found after delivery?
The audit covers your dependency state at delivery time. New CVEs that emerge after are outside scope but I offer re-audits at a discounted rate for returning clients.
