Skip to content

Commit

Permalink
Update dependencies to patch CVEs (Dependabot) (#188)
Browse files Browse the repository at this point in the history
* Update H2 Database to fix CWE-200, -312 (Password exposure)

* Update Apache Commons IO to 2.7 to fix CWE-20, -22 (path traversal & improper input validation)

* Update MySQL Connectors Java to 8.0.28 to fix CVE-2022-21363 (improper handling of insufficient permissions/privileges)

* Update Jython to 2.7.2b3 to fix CVE-2013-2027 (improper access restrictions vulnerability)

* Update MyBatis to fix CVE-2020-26945 (deserialization errors)

* Update Apache Commons Compress to 1.21 to fix CVE-2021-35517 (improper handling of length parameter)

* Update Apache Commons Email to fix CVE-2018-1294 (improper input validation)

* Update Apache Commons FileUpload to fix CVE-2023-24998 (denial of service vulnerability)
  • Loading branch information
wcgunter authored Oct 17, 2023
1 parent f307d7f commit 41718fb
Showing 1 changed file with 8 additions and 8 deletions.
16 changes: 8 additions & 8 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -26,13 +26,13 @@
<!-- <boon.version>0.12</boon.version> -->
<camunda.version>7.19.0</camunda.version>
<camunda-spin.version>1.9.0</camunda-spin.version>
<commons-compress.version>1.20</commons-compress.version>
<commons-compress.version>1.21</commons-compress.version>
<commons-configuration.version>1.10</commons-configuration.version>
<commons-exec.version>1.3</commons-exec.version>
<commons-fileupload.version>1.3.3</commons-fileupload.version>
<commons-io.version>2.4</commons-io.version>
<commons-fileupload.version>1.5</commons-fileupload.version>
<commons-io.version>2.7</commons-io.version>
<commons-lang.version>2.6</commons-lang.version>
<commons-email.version>1.3.2</commons-email.version>
<commons-email.version>1.5</commons-email.version>
<cws.version>${project.version}</cws.version>
<cws.core.version>${cws.version}</cws.core.version>
<cws.tasks.version>${cws.version}</cws.tasks.version>
Expand All @@ -45,7 +45,7 @@
<fst.version>1.55</fst.version> <!-- USE 1.35 for Java6, 1.55 for Java7 -->
<grizzly-http-server.version>2.3.11</grizzly-http-server.version>
<gson.version>2.8.9</gson.version>
<h2.version>1.2.132</h2.version>
<h2.version>2.2.220</h2.version>
<!-- <httpclient.version>4.3</httpclient.version> -->
<jacoco.version>0.8.2</jacoco.version>
<java.version>11</java.version>
Expand All @@ -54,7 +54,7 @@
<jms.version>1.1</jms.version>
<joda-time.version>2.1</joda-time.version>
<junit.version>4.13.1</junit.version>
<jython-standalone.version>2.7.1b3</jython-standalone.version>
<jython-standalone.version>2.7.2b3</jython-standalone.version>
<mariadb-java-client.version>2.7.2</mariadb-java-client.version>

<maven-compiler-plugin.version>3.8.0</maven-compiler-plugin.version>
Expand All @@ -65,8 +65,8 @@
<maven-failsafe-plugin.version>2.22.0</maven-failsafe-plugin.version>
<maven-surefire-plugin.version>2.22.2</maven-surefire-plugin.version>
<mockito.version>4.3.1</mockito.version>
<mybatis.version>3.5.3</mybatis.version>
<mysql-connector.version>8.0.16</mysql-connector.version>
<mybatis.version>3.5.6</mybatis.version>
<mysql-connector.version>8.0.28</mysql-connector.version>
<hikaricp.version>4.0.3</hikaricp.version>
<phantomjsdriver.version>1.0.4</phantomjsdriver.version>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
Expand Down

0 comments on commit 41718fb

Please sign in to comment.