reduce CDS java security vulnerabilities

[ccsdk/cds.git] / ms / blueprintsprocessor / parent / pom.xml

diff --git a/ms/blueprintsprocessor/parent/pom.xml b/ms/blueprintsprocessor/parent/pom.xml
index 8e29e06..3a888ab 100755 (executable)
--- a/ms/blueprintsprocessor/parent/pom.xml
+++ b/ms/blueprintsprocessor/parent/pom.xml
@@ -40,22 +40,22 @@
 
         <h2database.version>1.4.197</h2database.version>
         <powermock.version>1.7.4</powermock.version>
-        <mockkserver.version>5.5.1</mockkserver.version>
+        <mockkserver.version>5.13.0</mockkserver.version>
         <json.unit.version>2.8.0</json.unit.version>
         <xmlunit.version>2.6.3</xmlunit.version>
 
-        <sshd.version>2.2.0</sshd.version>
+        <sshd.version>2.10.0</sshd.version>
         <jsch.version>0.1.55</jsch.version>
         <jslt.version>0.1.8</jslt.version>
         <jython.version>2.7.2</jython.version>
         <jinja.version>2.7.0</jinja.version>
-        <guava.version>27.0.1-jre</guava.version>
+        <guava.version>33.0.0-jre</guava.version>
         <json-patch.version>1.9</json-patch.version>
-        <json-smart.version>2.4.6</json-smart.version>
+        <json-smart.version>2.4.9</json-smart.version>
 
         <commons-io-version>2.8.0</commons-io-version>
         <commons-compress-version>1.21</commons-compress-version>
-        <commons-collections-version>3.2.2</commons-collections-version>
+        <commons-collections-version>4.4</commons-collections-version>
     </properties>
 
     <dependencyManagement>
@@ -89,8 +89,8 @@
 
             <!-- Common Utils Dependencies -->
             <dependency>
-                <groupId>commons-collections</groupId>
-                <artifactId>commons-collections</artifactId>
+                <groupId>org.apache.commons</groupId>
+                <artifactId>commons-collections4</artifactId>
                 <version>${commons-collections-version}</version>
             </dependency>
             <dependency>
@@ -565,8 +565,9 @@
             <artifactId>commons-lang3</artifactId>
         </dependency>
         <dependency>
-            <groupId>commons-collections</groupId>
-            <artifactId>commons-collections</artifactId>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-collections4</artifactId>
+            <version>${commons-collections-version}</version>
         </dependency>
         <dependency>
             <groupId>commons-io</groupId>
@@ -658,6 +659,7 @@
         <dependency>
             <groupId>com.google.protobuf</groupId>
             <artifactId>protobuf-java</artifactId>
+            <version>${protobuff.java.utils.version}</version>
         </dependency>
         <dependency>
             <groupId>com.google.protobuf</groupId>