Fix security vulnerabilities

Change-Id: Ib0812a1cdf6bd2fcf2c22e468363667f52d9864d
Issue-ID: DMAAP-1176
Signed-off-by: econwar <conor.ward@est.tech>

diff --git a/datarouter-node/pom.xml b/datarouter-node/pom.xml
index 06aa3fc..537b05b 100755 (executable)
--- a/datarouter-node/pom.xml
+++ b/datarouter-node/pom.xml
@@ -128,6 +128,10 @@
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-lang3</artifactId>
         </dependency>
+        <dependency>
+            <groupId>com.thoughtworks.xstream</groupId>
+            <artifactId>xstream</artifactId>
+        </dependency>
     </dependencies>
     <profiles>
         <profile>

diff --git a/datarouter-prov/pom.xml b/datarouter-prov/pom.xml
index c6f6ff3..281cea7 100755 (executable)
--- a/datarouter-prov/pom.xml
+++ b/datarouter-prov/pom.xml
@@ -166,7 +166,7 @@
         <dependency>
             <groupId>org.hibernate</groupId>
             <artifactId>hibernate-entitymanager</artifactId>
-            <version>5.2.9.Final</version>
+            <version>5.4.1.Final</version>
         </dependency>
         <dependency>
             <groupId>org.hamcrest</groupId>
@@ -179,6 +179,10 @@
             <artifactId>hibernate-jpa-2.1-api</artifactId>
             <version>1.0.2.Final</version>
         </dependency>
+        <dependency>
+            <groupId>com.thoughtworks.xstream</groupId>
+            <artifactId>xstream</artifactId>
+        </dependency>
     </dependencies>
     <profiles>
         <profile>

diff --git a/datarouter-subscriber/pom.xml b/datarouter-subscriber/pom.xml
index 6c577a3..0182362 100755 (executable)
--- a/datarouter-subscriber/pom.xml
+++ b/datarouter-subscriber/pom.xml
@@ -89,6 +89,10 @@
             <version>1.2.17</version>
             <scope>compile</scope>
         </dependency>
+        <dependency>
+            <groupId>com.thoughtworks.xstream</groupId>
+            <artifactId>xstream</artifactId>
+        </dependency>
     </dependencies>
     <profiles>
         <profile>

diff --git a/pom.xml b/pom.xml
index 1e239cd..7a524b5 100755 (executable)
--- a/pom.xml
+++ b/pom.xml
@@ -85,7 +85,7 @@
         <sl4j-api.version>1.7.25</sl4j-api.version>
         <hamcrest-lib.version>1.3</hamcrest-lib.version>
         <annotations.version>12.0</annotations.version>
-
+        <xstream.version>1.4.10</xstream.version>
     </properties>
     <modules>
         <module>datarouter-prov</module>
@@ -257,6 +257,11 @@
                 <artifactId>json</artifactId>
                 <version>${json.version}</version>
             </dependency>
+            <dependency>
+                <groupId>com.thoughtworks.xstream</groupId>
+                <artifactId>xstream</artifactId>
+                <version>${xstream.version}</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
     <build>