- Dependabot alerts: critical vulnerabilities

geosolutions-it · May 7, 2024 · 2894ac2 · 2894ac2
1 parent 3050a57
commit 2894ac2
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/src/pom.xml b/src/pom.xml
@@ -43,10 +43,10 @@
         spring-security-core 3.0.4 requires spring-core 3.x, otherwise we'd normally use 2.5.6, which
         is what the rest of the app uses
         -->
-        <spring-version>5.3.18</spring-version>
+        <spring-version>5.3.34</spring-version>
         <!-- 2.5.6.SEC01 is the version used by smix-->
         <!-- 2.5.5 is the version used by memberService-->
-        <spring-security-version>5.6.12</spring-security-version>
+        <spring-security-version>5.7.12</spring-security-version>
         <spring-security-oauth2-version>2.5.2.RELEASE</spring-security-oauth2-version>
         <camel-version>1.6.1.2-fuse</camel-version>
         <velocity-version>1.6.2</velocity-version>
@@ -59,7 +59,7 @@
         <commons-logging-version>1.1.1</commons-logging-version>
         <commons-lang-version>2.3</commons-lang-version>
         <commons-collections-version>3.2.2</commons-collections-version>
-        <commons-beanutils-version>1.7.0</commons-beanutils-version>
+        <commons-beanutils-version>1.9.4</commons-beanutils-version>
         <commons-dbcp-version>1.2.2</commons-dbcp-version>
         <commons-codec-version>1.4</commons-codec-version>
         <geronimo-specs-version>1.1</geronimo-specs-version>
@@ -74,7 +74,7 @@
         <aspectj-version>1.5.4</aspectj-version>
         <ubl-version>2.0</ubl-version>
         <jetty-version>6.1H.22</jetty-version>
-        <jettison-version>1.4.0</jettison-version>
+        <jettison-version>1.5.2</jettison-version>
         <persistence-version>1.0</persistence-version>
         <hibernate-version>5.4.33.Final</hibernate-version>
         <hibernate-generic-dao-version>geosolutions-1.3.0</hibernate-generic-dao-version>
@@ -104,7 +104,7 @@
         <postgis-jdbc.version>1.3.3</postgis-jdbc.version>
         <postgresql.version>42.3.9</postgresql.version>
         <jts.version>1.10</jts.version>
-        <h2.version>1.3.175</h2.version>
+        <h2.version>2.2.220</h2.version>
         <picocli.version>4.6.1</picocli.version>
         <ojdbc6.version>11.2.0</ojdbc6.version>
         <spring-security-oauth2.version>2.0.17.RELEASE</spring-security-oauth2.version>
@@ -118,7 +118,7 @@
         <freemarker.version>2.3.20</freemarker.version>
         <apacheds-all.version>1.5.5</apacheds-all.version>
         <shared-ldap.version>0.9.16</shared-ldap.version>
-        <jetty.version>6.1.14</jetty.version>
+        <jetty.version>6.1.23</jetty.version>
         <jstl.version>1.2</jstl.version>
         <json-lib.version>2.4.2-geoserver</json-lib.version>
         <maven-pmd-plugin.version>3.11.0</maven-pmd-plugin.version>