From bceb18df30982e2ace538baf5c49336fe0e45b0a Mon Sep 17 00:00:00 2001
From: econwar <conor.ward@est.tech>
Date: Tue, 23 Apr 2019 13:32:22 +0000
Subject: [PATCH] Fix security vulnerabilities

Change-Id: Ib0812a1cdf6bd2fcf2c22e468363667f52d9864d
Issue-ID: DMAAP-1176
Signed-off-by: econwar <conor.ward@est.tech>
---
 datarouter-node/pom.xml       | 4 ++++
 datarouter-prov/pom.xml       | 6 +++++-
 datarouter-subscriber/pom.xml | 4 ++++
 pom.xml                       | 7 ++++++-
 4 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/datarouter-node/pom.xml b/datarouter-node/pom.xml
index 06aa3fcf..537b05b5 100755
--- a/datarouter-node/pom.xml
+++ b/datarouter-node/pom.xml
@@ -128,6 +128,10 @@
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-lang3</artifactId>
         </dependency>
+        <dependency>
+            <groupId>com.thoughtworks.xstream</groupId>
+            <artifactId>xstream</artifactId>
+        </dependency>
     </dependencies>
     <profiles>
         <profile>
diff --git a/datarouter-prov/pom.xml b/datarouter-prov/pom.xml
index c6f6ff3e..281cea7c 100755
--- a/datarouter-prov/pom.xml
+++ b/datarouter-prov/pom.xml
@@ -166,7 +166,7 @@
         <dependency>
             <groupId>org.hibernate</groupId>
             <artifactId>hibernate-entitymanager</artifactId>
-            <version>5.2.9.Final</version>
+            <version>5.4.1.Final</version>
         </dependency>
         <dependency>
             <groupId>org.hamcrest</groupId>
@@ -179,6 +179,10 @@
             <artifactId>hibernate-jpa-2.1-api</artifactId>
             <version>1.0.2.Final</version>
         </dependency>
+        <dependency>
+            <groupId>com.thoughtworks.xstream</groupId>
+            <artifactId>xstream</artifactId>
+        </dependency>
     </dependencies>
     <profiles>
         <profile>
diff --git a/datarouter-subscriber/pom.xml b/datarouter-subscriber/pom.xml
index 6c577a32..0182362c 100755
--- a/datarouter-subscriber/pom.xml
+++ b/datarouter-subscriber/pom.xml
@@ -89,6 +89,10 @@
             <version>1.2.17</version>
             <scope>compile</scope>
         </dependency>
+        <dependency>
+            <groupId>com.thoughtworks.xstream</groupId>
+            <artifactId>xstream</artifactId>
+        </dependency>
     </dependencies>
     <profiles>
         <profile>
diff --git a/pom.xml b/pom.xml
index 1e239cdb..7a524b57 100755
--- a/pom.xml
+++ b/pom.xml
@@ -85,7 +85,7 @@
         <sl4j-api.version>1.7.25</sl4j-api.version>
         <hamcrest-lib.version>1.3</hamcrest-lib.version>
         <annotations.version>12.0</annotations.version>
-
+        <xstream.version>1.4.10</xstream.version>
     </properties>
     <modules>
         <module>datarouter-prov</module>
@@ -257,6 +257,11 @@
                 <artifactId>json</artifactId>
                 <version>${json.version}</version>
             </dependency>
+            <dependency>
+                <groupId>com.thoughtworks.xstream</groupId>
+                <artifactId>xstream</artifactId>
+                <version>${xstream.version}</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
     <build>
-- 
2.16.6