fix security vulnerabilities

Issue-ID: DMAAP-1418
Change-Id: I50788ba8083a3188c920f72de342252c5f7e383d
Signed-off-by: su622b <su622b@att.com>

diff --git a/pom.xml b/pom.xml
index 97457f4..4461cf2 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -306,11 +306,53 @@
                        part of the JDK now <exclusion> <groupId>javax.activation</groupId> <artifactId>activation</artifactId> 
                        </exclusion> </exclusions> </dependency> -->
 
-               <dependency>
-                       <groupId>org.apache.zookeeper</groupId>
-                       <artifactId>zookeeper</artifactId>
-                       <version>3.4.10</version>
-               </dependency>
+       <dependency>
+       <groupId>org.apache.zookeeper</groupId>
+       <artifactId>zookeeper</artifactId>
+       <version>3.4.14</version>
+   </dependency>
+   <dependency>
+      <groupId>org.slf4j</groupId>
+      <artifactId>slf4j-api</artifactId>
+      <version>1.6.1</version>
+    </dependency>
+    <dependency>
+      <groupId>org.slf4j</groupId>
+      <artifactId>slf4j-log4j12</artifactId>
+      <version>1.6.1</version>
+      <exclusions>
+        <exclusion>
+          <groupId>*</groupId>
+          <artifactId>*</artifactId>
+        </exclusion>
+      </exclusions>
+    </dependency>
+
+       <dependency>
+               <groupId>org.apache.kafka</groupId>
+               <artifactId>kafka_2.11</artifactId>
+               <version>2.3.0</version>
+       </dependency>
+       <dependency>
+               <groupId>commons-codec</groupId>
+               <artifactId>commons-codec</artifactId>
+               <version>1.13</version>
+       </dependency>
+       <dependency>
+               <groupId>org.quartz-scheduler</groupId>
+               <artifactId>quartz</artifactId>
+               <version>2.3.2</version>
+       </dependency>
+       <dependency>
+               <groupId>com.fasterxml.woodstox</groupId>
+               <artifactId>woodstox-core</artifactId>
+               <version>5.3.0</version>
+       </dependency>
+       <dependency>
+               <groupId>org.springframework</groupId>
+               <artifactId>spring-webmvc</artifactId>
+               <version>5.2.3.RELEASE</version>
+       </dependency>
                <dependency>
                        <groupId>org.grails</groupId>
                        <artifactId>grails-bootstrap</artifactId>
@@ -400,6 +442,10 @@
                        <artifactId>msgrtr</artifactId>
                        <version>1.1.22</version>
                        <exclusions>
+                               <exclusion>
+                                       <groupId>org.apache.kafka</groupId>
+                               <artifactId>kafka_2.11</artifactId>
+                               </exclusion>
                                <exclusion>
                                        <groupId>org.slf4j</groupId>
                                        <artifactId>slf4j-log4j12</artifactId>