From: sharath reddy <bs.reddy@huawei.com>
Date: Thu, 19 Aug 2021 10:20:10 +0000 (+0530)
Subject: fix Istanbul CLI vulnerabilities
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;ds=sidebyside;h=36f64298464e80623f5d1907f20f5e6d7e0020ae;p=cli.git

fix Istanbul CLI vulnerabilities

Issue-ID: CLI-401

Signed-off-by: sharath reddy <bs.reddy@huawei.com>
Change-Id: I0ca2826bfb3d41ce90e78d1a0ec69109b1ab260c
Signed-off-by: sharath reddy <bs.reddy@huawei.com>
---

diff --git a/framework/pom.xml b/framework/pom.xml
index 024d1a64..e0853efa 100644
--- a/framework/pom.xml
+++ b/framework/pom.xml
@@ -101,7 +101,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.11.0</version>
+            <version>2.12.1</version>
             <exclusions>
                 <exclusion>
                     <groupId>com.fasterxml.jackson.core</groupId>
@@ -112,7 +112,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-core</artifactId>
-            <version>2.11.0</version>
+            <version>2.12.1</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.dataformat</groupId>
diff --git a/profiles/http/pom.xml b/profiles/http/pom.xml
index a89ba75d..e937c436 100644
--- a/profiles/http/pom.xml
+++ b/profiles/http/pom.xml
@@ -52,7 +52,7 @@ Excluded commons-codec vulnerable version and added invulnerable version
         <dependency>
             <groupId>org.apache.httpcomponents</groupId>
             <artifactId>httpclient</artifactId>
-            <version>4.5.7</version>
+            <version>4.5.13</version>
             <exclusions>
                 <exclusion>
                     <groupId>commons-codec</groupId>
@@ -110,7 +110,7 @@ Excluded commons-codec vulnerable version and added invulnerable version
       <dependency>
           <groupId>io.netty</groupId>
           <artifactId>netty-codec-http</artifactId>
-          <version>4.1.48.Final</version>
+          <version>4.1.63.Final</version>
       </dependency>
           <dependency>
             <groupId>junit</groupId>
@@ -133,7 +133,7 @@ Excluded commons-codec vulnerable version and added invulnerable version
       <dependency>
           <groupId>com.fasterxml.jackson.core</groupId>
           <artifactId>jackson-databind</artifactId>
-          <version>2.10.0</version>
+          <version>2.12.1</version>
       </dependency>
    </dependencies>
    <build>