fix security vulnerabilities

Issue-ID: DMAAP-592
Change-Id: I8555e3633222e3599b29dafd8fd0ec17bb426773
Signed-off-by: sunil unnava <su622b@att.com>

diff --git a/pom.xml b/pom.xml
index 7112a10..d792506 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -86,13 +86,13 @@
                        <groupId>org.apache.tomcat</groupId>
                        <artifactId>tomcat-catalina</artifactId>
                        <version>8.5.23</version>
-               </dependency> -->
-               <!-- <dependency>
+               </dependency>
+               <dependency>
                        <groupId>org.apache.tomcat</groupId>
                        <artifactId>tomcat-util</artifactId>
                        <version>8.5.23</version>
-               </dependency> -->
-               <!-- <dependency>
+               </dependency>
+               <dependency>
                        <groupId>org.apache.tomcat.embed</groupId>
                        <artifactId>tomcat-embed-core</artifactId>
                        <version>8.5.23</version>
@@ -320,6 +320,20 @@
                        <groupId>com.att.nsa</groupId>
                        <artifactId>nsaServerLibrary</artifactId>
                        <version>1.0.10</version>
+                       <exclusions>
+                               <exclusion>
+                                       <groupId>org.apache.tomcat</groupId>
+                                       <artifactId>tomcat-catalina</artifactId>
+                               </exclusion>
+                               <exclusion>
+                                       <groupId>org.apache.tomcat.embed</groupId>
+                                       <artifactId>tomcat-embed-core</artifactId>
+                               </exclusion>
+                               <exclusion>
+                                       <groupId>org.apache.tomcat</groupId>
+                                       <artifactId>tomcat-util</artifactId>
+                               </exclusion>
+                       </exclusions>
                </dependency>
                <dependency>
                        <groupId>com.att.nsa</groupId>