Updated Vulnerable Dependencies

Issue-ID: HOLMES-510
Signed-off-by: GuangrongFu <fu.guangrong@zte.com.cn>
Change-Id: I5c2606aa4137fd1994a5ed60e45610f0a0aefd46

diff --git a/pom.xml b/pom.xml
index 49a10cc..c7aa53c 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -41,7 +41,7 @@
         <dropwizard.version>2.0.9</dropwizard.version>\r
         <swagger.version>1.6.1</swagger.version>\r
         <lombok.version>1.18.4</lombok.version>\r
-        <jersey.version>2.31</jersey.version>\r
+        <jersey.version>2.34</jersey.version>\r
         <slf4j.version>1.7.25</slf4j.version>\r
         <jacoco.version>0.8.5</jacoco.version>\r
         <sonar.coverage.jacoco.xmlReportPaths>\r
@@ -54,12 +54,18 @@
             <dependency>\r
                 <groupId>ch.qos.logback</groupId>\r
                 <artifactId>logback-classic</artifactId>\r
-                <version>1.2.3</version>\r
+                <version>1.2.10</version>\r
             </dependency>\r
             <dependency>\r
                 <groupId>org.onap.msb.java-sdk</groupId>\r
                 <artifactId>msb-java-sdk</artifactId>\r
                 <version>1.2.5</version>\r
+                <exclusions>\r
+                    <exclusion>\r
+                        <groupId>com.fasterxml.jackson.core</groupId>\r
+                        <artifactId>jackson-databind</artifactId>\r
+                    </exclusion>\r
+                </exclusions>\r
             </dependency>\r
             <dependency>\r
                 <groupId>org.glassfish.jersey.containers</groupId>\r
@@ -158,7 +164,7 @@
             <dependency>\r
                 <groupId>com.google.code.gson</groupId>\r
                 <artifactId>gson</artifactId>\r
-                <version>2.8.6</version>\r
+                <version>2.8.9</version>\r
             </dependency>\r
         </dependencies>\r
     </dependencyManagement>\r