diff --git a/owasp/suppressions.xml b/owasp/suppressions.xml index 442c5fc..c8703cc 100644 --- a/owasp/suppressions.xml +++ b/owasp/suppressions.xml @@ -4,7 +4,19 @@ Updating of Keycloak Lib is not possible at the moment. Security risk is not affecting CWA components. CVE-2022-1466 + CVE-2022-1970 CVE-2021-20323 + CVE-2020-14359 + + + + CVE is matching for Spring Security 5.3.x, but we have 5.7.x + CVE-2020-5408 + + + + CVE is matching for Spring Framework up to 5.3.20, but we have 5.3.21 + CVE-2016-1000027 \ No newline at end of file diff --git a/pom.xml b/pom.xml index daec7b7..cb651cb 100644 --- a/pom.xml +++ b/pom.xml @@ -59,7 +59,7 @@ org.springframework.boot spring-boot-dependencies - 2.6.7 + 2.7.1 pom import @@ -73,7 +73,7 @@ org.springframework.cloud spring-cloud-starter-openfeign - 3.1.1 + 3.1.3 commons-io @@ -84,7 +84,7 @@ org.springdoc springdoc-openapi-ui - 1.6.8 + 1.6.9 @@ -100,12 +100,12 @@ net.javacrumbs.shedlock shedlock-spring - 4.34.0 + 4.37.0 net.javacrumbs.shedlock shedlock-provider-jdbc-template - 4.34.0 + 4.37.0 @@ -142,7 +142,7 @@ com.nimbusds nimbus-jose-jwt - 9.22 + 9.23 @@ -150,12 +150,12 @@ org.liquibase liquibase-core - 4.9.1 + 4.12.0 com.h2database h2 - 2.1.212 + 2.1.214 runtime @@ -239,31 +239,31 @@ com.amazonaws aws-java-sdk-s3 - 1.12.201 + 1.12.250 io.pivotal.cfenv java-cfenv-boot - 2.3.0 + 2.4.0 com.sap.cloud.sdk.cloudplatform scp-cf - 3.67.0 + 3.70.0 com.sap.hcp.cf.logging cf-java-logging-support-logback - 3.6.0 + 3.6.2 org.mapstruct mapstruct - 1.4.2.Final + 1.5.2.Final @@ -274,7 +274,7 @@ org.springframework.boot spring-boot-maven-plugin - 2.6.7 + 2.7.1 @@ -288,13 +288,13 @@ org.apache.maven.plugins maven-surefire-plugin - 3.0.0-M6 + 3.0.0-M7 org.apache.maven.plugins maven-compiler-plugin - 3.8.1 + 3.10.1 @@ -305,7 +305,7 @@ org.mapstruct mapstruct-processor - 1.4.2.Final + 1.5.2.Final @@ -358,7 +358,7 @@ org.codehaus.mojo license-maven-plugin - 2.0.0 + 4.1 **/*.java ${project.organization.name} and all other contributors @@ -380,7 +380,7 @@ org.owasp dependency-check-maven - 7.1.0 + 7.1.1 ./owasp/suppressions.xml true @@ -391,7 +391,7 @@ org.asciidoctor asciidoctor-maven-plugin - 1.5.8 + 2.2.2 org.springframework.restdocs