fixes for security issues

Issue-ID: DMAAP-207
Change-Id: I818f47202f55fa56bd07436b940e9e4b6343e877
Signed-off-by: Sunil Unnava <su622b@att.com>

diff --git a/pom.xml b/pom.xml
index ebbacd5..8fff980 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -105,18 +105,29 @@
                <artifactId>logback-classic</artifactId>
                <version>1.2.0</version>
        </dependency>
-       <dependency>
+       <!-- <dependency>
                <groupId>commons-beanutils</groupId>
                <artifactId>commons-beanutils</artifactId>
-               <version>1.9.3</version>
+               <version>1.9.2</version>
                <exclusions>
-                       <!-- We have JCL-over-SLF4J instead. -->
+                       We have JCL-over-SLF4J instead.
                        <exclusion>
                                <groupId>commons-logging</groupId>
                                <artifactId>commons-logging</artifactId>
                        </exclusion>
                </exclusions>
-       </dependency>
+       </dependency> -->
+       <dependency>
+    <groupId>org.grails</groupId>
+       <artifactId>grails-web</artifactId>
+       <version>2.4.4</version>
+        </dependency>
+     <dependency>
+                       <groupId>org.springframework</groupId>
+                       <artifactId>spring-test</artifactId>
+                       <version>${spring.version}</version>
+                       <scope>test</scope>
+               </dependency>
        <dependency>
                <groupId>org.codehaus.groovy</groupId>
                <artifactId>groovy-all</artifactId>
@@ -327,14 +338,14 @@
                <dependency>
                        <groupId>com.fasterxml.jackson.core</groupId>
                        <artifactId>jackson-core</artifactId>
-                       <version>2.8.5</version>
+                       <version>2.8.11</version>
                        <scope>test</scope>
                </dependency>
                
                <dependency>
                        <groupId>com.fasterxml.jackson.core</groupId>
                        <artifactId>jackson-databind</artifactId>
-                       <version>2.8.11</version>
+                       <version>2.8.11.1</version>
                </dependency>
 
                <dependency>