diff --git a/owasp/suppressions.xml b/owasp/suppressions.xml
index 442c5fc..c8703cc 100644
--- a/owasp/suppressions.xml
+++ b/owasp/suppressions.xml
@@ -4,7 +4,19 @@
Updating of Keycloak Lib is not possible at the moment. Security risk is not affecting CWA components.
CVE-2022-1466
+ CVE-2022-1970
CVE-2021-20323
+ CVE-2020-14359
+
+
+
+ CVE is matching for Spring Security 5.3.x, but we have 5.7.x
+ CVE-2020-5408
+
+
+
+ CVE is matching for Spring Framework up to 5.3.20, but we have 5.3.21
+ CVE-2016-1000027
\ No newline at end of file
diff --git a/pom.xml b/pom.xml
index daec7b7..cb651cb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -59,7 +59,7 @@
org.springframework.boot
spring-boot-dependencies
- 2.6.7
+ 2.7.1
pom
import
@@ -73,7 +73,7 @@
org.springframework.cloud
spring-cloud-starter-openfeign
- 3.1.1
+ 3.1.3
commons-io
@@ -84,7 +84,7 @@
org.springdoc
springdoc-openapi-ui
- 1.6.8
+ 1.6.9
@@ -100,12 +100,12 @@
net.javacrumbs.shedlock
shedlock-spring
- 4.34.0
+ 4.37.0
net.javacrumbs.shedlock
shedlock-provider-jdbc-template
- 4.34.0
+ 4.37.0
@@ -142,7 +142,7 @@
com.nimbusds
nimbus-jose-jwt
- 9.22
+ 9.23
@@ -150,12 +150,12 @@
org.liquibase
liquibase-core
- 4.9.1
+ 4.12.0
com.h2database
h2
- 2.1.212
+ 2.1.214
runtime
@@ -239,31 +239,31 @@
com.amazonaws
aws-java-sdk-s3
- 1.12.201
+ 1.12.250
io.pivotal.cfenv
java-cfenv-boot
- 2.3.0
+ 2.4.0
com.sap.cloud.sdk.cloudplatform
scp-cf
- 3.67.0
+ 3.70.0
com.sap.hcp.cf.logging
cf-java-logging-support-logback
- 3.6.0
+ 3.6.2
org.mapstruct
mapstruct
- 1.4.2.Final
+ 1.5.2.Final
@@ -274,7 +274,7 @@
org.springframework.boot
spring-boot-maven-plugin
- 2.6.7
+ 2.7.1
@@ -288,13 +288,13 @@
org.apache.maven.plugins
maven-surefire-plugin
- 3.0.0-M6
+ 3.0.0-M7
org.apache.maven.plugins
maven-compiler-plugin
- 3.8.1
+ 3.10.1
@@ -305,7 +305,7 @@
org.mapstruct
mapstruct-processor
- 1.4.2.Final
+ 1.5.2.Final
@@ -358,7 +358,7 @@
org.codehaus.mojo
license-maven-plugin
- 2.0.0
+ 4.1
**/*.java
${project.organization.name} and all other contributors
@@ -380,7 +380,7 @@
org.owasp
dependency-check-maven
- 7.1.0
+ 7.1.1
./owasp/suppressions.xml
true
@@ -391,7 +391,7 @@
org.asciidoctor
asciidoctor-maven-plugin
- 1.5.8
+ 2.2.2
org.springframework.restdocs