Update some direct dependencies

[clamp.git] / pom.xml

diff --git a/pom.xml b/pom.xml
index 46d9068..0a0d6c4 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -99,7 +99,7 @@
                <docker.skip.tag>true</docker.skip.tag>
                <skip.staging.artifacts>false</skip.staging.artifacts>
                <python.http.proxy.param />
-               <tomcat.version>9.0.33</tomcat.version>
+               <tomcat.version>9.0.37</tomcat.version>
                <ui.react.src>ui-react</ui.react.src>
                <ui.react.lib.src>ui-react-lib</ui.react.lib.src>
                <npm.publish.url>https://nexus3.onap.org/repository/npm.snapshot/</npm.publish.url>
@@ -455,12 +455,12 @@
                        <artifactId>persistence-api</artifactId>
                        <version>1.0.2</version>
                </dependency>
+               <!-- Other dependencies to fix nexus IQ reported vulnerabilities -->
                <dependency>
-                       <groupId>org.apache.commons</groupId>
-                       <artifactId>commons-csv</artifactId>
-                       <version>1.3</version>
+                       <groupId>commons-codec</groupId>
+                       <artifactId>commons-codec</artifactId>
+                       <version>1.14</version>
                </dependency>
-               <!-- Other dependencies to fix nexus IQ reported vulnerabilities -->
                <dependency>
                        <groupId>org.springframework.security</groupId>
                        <artifactId>spring-security-web</artifactId>
@@ -481,16 +481,12 @@
                        <artifactId>guava</artifactId>
                        <version>27.0-jre</version>
                </dependency>
-               <dependency>
-                       <groupId>commons-codec</groupId>
-                       <artifactId>commons-codec</artifactId>
-                       <version>1.13</version>
-               </dependency>
+
                <!-- Remove the MYSQL connector and replace it by Mariadb -->
                <dependency>
                        <groupId>org.mariadb.jdbc</groupId>
                        <artifactId>mariadb-java-client</artifactId>
-                       <version>2.2.1</version>
+                       <version>2.6.2</version>
                </dependency>
                <!-- For SDC Controller -->
                <dependency>