fix security vulnerabilities

[dmaap/messagerouter/msgrtr.git] / pom.xml

diff --git a/pom.xml b/pom.xml
index 3fe1699..958e7c1 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -79,21 +79,6 @@
        </developers>
 
        <dependencies>
-           <!-- <dependency>
-                       <groupId>org.apache.tomcat</groupId>
-                       <artifactId>tomcat-catalina</artifactId>
-                       <version>8.5.23</version>
-               </dependency>
-               <dependency>
-                       <groupId>org.apache.tomcat</groupId>
-                       <artifactId>tomcat-util</artifactId>
-                       <version>8.5.23</version>
-               </dependency>
-               <dependency>
-                       <groupId>org.apache.tomcat.embed</groupId>
-                       <artifactId>tomcat-embed-core</artifactId>
-                       <version>8.5.23</version>
-               </dependency> -->
                <dependency>
                        <groupId>commons-collections</groupId>
                        <artifactId>commons-collections</artifactId>
@@ -261,7 +246,7 @@
                <dependency>
                        <groupId>org.springframework</groupId>
                        <artifactId>spring-webmvc</artifactId>
-                       <version>4.3.18.RELEASE</version>
+                       <version>5.2.3.RELEASE</version>
                </dependency>
                <dependency>
                        <groupId>org.springframework</groupId>
@@ -301,11 +286,16 @@
                </dependency>
 
                <!-- Apache Kafka -->
-               <dependency>
-                       <groupId>org.apache.kafka</groupId>
-                       <artifactId>kafka_2.11</artifactId>
-               <version>0.11.0.3</version>
-               </dependency>
+<dependency>
+       <groupId>org.apache.kafka</groupId>
+       <artifactId>kafka_2.11</artifactId>
+       <version>0.11.0.3</version>
+      </dependency>
+       <dependency>
+               <groupId>commons-codec</groupId>
+               <artifactId>commons-codec</artifactId>
+               <version>1.13</version>
+       </dependency>
        <dependency>
                <groupId>com.google.guava</groupId>
                <artifactId>guava</artifactId>