Update the vulnerable direct dependencies

Update java-sdk vulnerable direct dependencies

Issue-ID: MSB-593
Signed-off-by: jinquanni <ni.jinquan@zte.com.cn>
Change-Id: I636070cd7cbf86f0a24ac455d86e54cc838898de

diff --git a/pom.xml b/pom.xml
index 200a145..59c7176 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -35,12 +35,12 @@
     <dependency>
       <groupId>org.apache.httpcomponents</groupId>
       <artifactId>httpclient</artifactId>
-      <version>4.5.10</version>
+      <version>4.5.13</version>
     </dependency>
     <dependency>
       <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>
-      <version>1.13</version>
+      <version>1.15</version>
     </dependency>
     <dependency>
       <groupId>junit</groupId>
@@ -63,12 +63,12 @@
     <dependency>
         <groupId>com.fasterxml.jackson.core</groupId>
         <artifactId>jackson-databind</artifactId>
-        <version>2.10.1</version>
+        <version>2.12.1</version>
     </dependency>
     <dependency>
         <groupId>com.fasterxml.jackson.core</groupId>
         <artifactId>jackson-core</artifactId>
-        <version>2.10.1</version>
+        <version>2.12.1</version>
     </dependency>
     <dependency>
         <groupId>com.google.guava</groupId>