Merge "SO Critical vulnerability"

diff --git a/asdc-controller/pom.xml b/asdc-controller/pom.xml
index d539e65..244d83f 100644 (file)
--- a/asdc-controller/pom.xml
+++ b/asdc-controller/pom.xml
@@ -215,7 +215,7 @@
     <dependency>
       <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>
-      <version>1.9</version>
+      <version>1.15</version>
     </dependency>
     <dependency>
       <groupId>org.onap.so</groupId>

diff --git a/common/pom.xml b/common/pom.xml
index bbb32b5..330e6dd 100644 (file)
--- a/common/pom.xml
+++ b/common/pom.xml
@@ -107,6 +107,7 @@
     <dependency>
       <groupId>org.springframework.security</groupId>
       <artifactId>spring-security-web</artifactId>
+      <version>5.4.6</version>
     </dependency>
     <dependency>
       <groupId>org.mockito</groupId>

diff --git a/mso-catalog-db/pom.xml b/mso-catalog-db/pom.xml
index c2bcf9b..c4913e6 100644 (file)
--- a/mso-catalog-db/pom.xml
+++ b/mso-catalog-db/pom.xml
@@ -73,6 +73,7 @@
     <dependency>
       <groupId>org.springframework.data</groupId>
       <artifactId>spring-data-rest-hal-browser</artifactId>
+      <version>3.3.9.RELEASE</version>
     </dependency>
     <dependency>
       <groupId>org.ow2.asm</groupId>

diff --git a/pom.xml b/pom.xml
index 879a3ee..41f1c44 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -884,7 +884,7 @@
       <dependency>
         <groupId>commons-codec</groupId>
         <artifactId>commons-codec</artifactId>
-        <version>1.12</version>
+        <version>1.15</version>
         <scope>compile</scope>
       </dependency>
       <dependency>