Upgrade vulnerable dependency 'org.apache.httpcomponents:httpcore'

Issue-ID: SDC-3933
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech>
Change-Id: Ic9859097270906405fb2c9b6988c8ae88e9ccdff

diff --git a/onboarding/pom.xml b/onboarding/pom.xml
index 3609c2a..a764ea2 100644 (file)
--- a/onboarding/pom.xml
+++ b/onboarding/pom.xml
@@ -58,7 +58,7 @@
         <datastax.cassandra.version>3.8.0</datastax.cassandra.version>
         <groovy.minimal.version>1.5.8</groovy.minimal.version>
         <http.client.version>${httpclient.version}</http.client.version>
-        <http.core.version>4.4.1</http.core.version>
+        <http.core.version>${httpcore.version}</http.core.version>
         <httpasyncclient.version>4.1.2</httpasyncclient.version>
         <com.sun.xml.version>2.3.3</com.sun.xml.version>
         <javax.el.version>2.2.6</javax.el.version>

diff --git a/pom.xml b/pom.xml
index 0429e21..90e3c57 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -92,7 +92,7 @@ Modifications copyright (c) 2018-2019 Nokia
         <snakeyaml.version>1.29</snakeyaml.version>
         <functionaljava.version>4.9</functionaljava.version>
         <httpclient.version>4.5.13</httpclient.version>
-        <httpcore.version>4.4.1</httpcore.version>
+        <httpcore.version>4.4.15</httpcore.version>
         <json-simple.version>1.1</json-simple.version>
 
         <!-- PM Dictionary validation -->