Skip to content
This repository was archived by the owner on Jun 13, 2025. It is now read-only.

Commit d0043d6

Browse files
committed
Update Springframework, jackson, and jackson-databind dependencies (addresses CVE-2022-22965)
1 parent b15fa40 commit d0043d6

File tree

1 file changed

+61
-7
lines changed

1 file changed

+61
-7
lines changed

pom.xml

Lines changed: 61 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -65,11 +65,12 @@
6565

6666
<!-- Dependencies -->
6767
<ids-messaging-services.version>5.1.1</ids-messaging-services.version>
68-
<springframework.plugin>2.0.0.RELEASE</springframework.plugin>
68+
<springframework.version>5.3.18</springframework.version>
6969
<swagger-annotations.version>1.6.2</swagger-annotations.version>
7070
<okhttp.version>4.9.1</okhttp.version>
7171
<modelmapper.version>2.4.4</modelmapper.version>
72-
<jackson.version>2.12.5</jackson.version>
72+
<jackson.version>2.13.2</jackson.version>
73+
<jackson-databind.version>2.13.2.2</jackson-databind.version>
7374
<postgres.version>42.2.23</postgres.version>
7475
<springdoc-ui.version>1.5.10</springdoc-ui.version>
7576
<springdoc-security.version>1.5.10</springdoc-security.version>
@@ -150,6 +151,22 @@
150151
<groupId>com.squareup.okhttp3</groupId>
151152
<artifactId>okhttp</artifactId>
152153
</exclusion>
154+
<exclusion>
155+
<groupId>org.springframework</groupId>
156+
<artifactId>spring-tx</artifactId>
157+
</exclusion>
158+
<exclusion>
159+
<groupId>org.springframework</groupId>
160+
<artifactId>spring-webmvc</artifactId>
161+
</exclusion>
162+
<exclusion>
163+
<groupId>org.springframework</groupId>
164+
<artifactId>spring-core</artifactId>
165+
</exclusion>
166+
<exclusion>
167+
<groupId>org.springframework</groupId>
168+
<artifactId>spring-test</artifactId>
169+
</exclusion>
153170
</exclusions>
154171
</dependency>
155172

@@ -165,11 +182,48 @@
165182
</exclusions>
166183
</dependency>
167184

168-
<!-- https://mvnrepository.com/artifact/org.springframework.plugin/spring-plugin-core -->
185+
186+
<!-- Spring dependencies -->
187+
<dependency>
188+
<groupId>org.springframework</groupId>
189+
<artifactId>spring-beans</artifactId>
190+
<version>${springframework.version}</version>
191+
</dependency>
192+
193+
<dependency>
194+
<groupId>org.springframework</groupId>
195+
<artifactId>spring-context</artifactId>
196+
<version>${springframework.version}</version>
197+
</dependency>
198+
199+
<dependency>
200+
<groupId>org.springframework</groupId>
201+
<artifactId>spring-aop</artifactId>
202+
<version>${springframework.version}</version>
203+
</dependency>
204+
205+
<dependency>
206+
<groupId>org.springframework</groupId>
207+
<artifactId>spring-core</artifactId>
208+
<version>${springframework.version}</version>
209+
</dependency>
210+
169211
<dependency>
170-
<groupId>org.springframework.plugin</groupId>
171-
<artifactId>spring-plugin-core</artifactId>
172-
<version>${springframework.plugin}</version>
212+
<groupId>org.springframework</groupId>
213+
<artifactId>spring-webmvc</artifactId>
214+
<version>${springframework.version}</version>
215+
</dependency>
216+
217+
<dependency>
218+
<groupId>org.springframework</groupId>
219+
<artifactId>spring-tx</artifactId>
220+
<version>${springframework.version}</version>
221+
</dependency>
222+
223+
<dependency>
224+
<groupId>org.springframework</groupId>
225+
<artifactId>spring-test</artifactId>
226+
<version>${springframework.version}</version>
173227
</dependency>
174228

175229
<dependency>
@@ -297,7 +351,7 @@
297351
<dependency>
298352
<groupId>com.fasterxml.jackson.core</groupId>
299353
<artifactId>jackson-databind</artifactId>
300-
<version>${jackson.version}</version>
354+
<version>${jackson-databind.version}</version>
301355
</dependency>
302356

303357
<!-- https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-core -->

0 commit comments

Comments
 (0)