Merge pull request #27 from admin-ch/feature/fix_vulnerabilities

Feature/fix vulnerabilities

Author: haraldloesing

pom.xml

@@ -5,33 +5,36 @@
 	<parent>
 		<groupId>org.springframework.boot</groupId>
 		<artifactId>spring-boot-starter-parent</artifactId>
-		<version>2.7.5</version>
+		<version>2.7.6</version>
 		<relativePath/>
 	</parent>
 	<groupId>ch.admin.bag.covidcertificate</groupId>
 	<artifactId>cc-light-certificate-generation-service</artifactId>
-	<version>4.9.2</version>
+	<version>4.9.3</version>
 	<name>cc-light-certificate-generation-service</name>
 	<description>Service for generating a light covid certificate</description>
 
 	<properties>
 		<java.version>17</java.version>
 
-		<cc-backend-logging.version>1.0.4</cc-backend-logging.version>
+		<cc-backend-logging.version>1.0.5</cc-backend-logging.version>
 		<dgc-java.version>1.0.2</dgc-java.version>
 		<google-zxing.version>3.5.1</google-zxing.version>
 		<guava.version>31.1-jre</guava.version>
+		<jackson-core.version>2.14.1</jackson-core.version>
 		<jacoco-maven-plugin.version>0.8.7</jacoco-maven-plugin.version>
 		<janino.version>3.1.9</janino.version>
 		<java-cfenv-boot.version>2.4.1</java-cfenv-boot.version>
 		<jjwt.version>0.11.5</jjwt.version>
 		<logstash.version>7.2</logstash.version>
+		<snakeyaml.version>1.32</snakeyaml.version>
 		<spring-cloud-starter-sleuth.version>3.1.5</spring-cloud-starter-sleuth.version>
 		<spring-cloud.version>2021.0.4</spring-cloud.version>
 		<springdoc.version>1.6.13</springdoc.version>
+		<woodstox-core.version>6.4.0</woodstox-core.version>
 
 		<maven.javadoc.skip>true</maven.javadoc.skip>
-		<log4j2.version>2.18.0</log4j2.version>
+		<log4j2.version>2.19.0</log4j2.version>
 
 		<sonar.exclusions>
 			**/org/**/*.java,**/com/**/*.java,**/config/security/**/*.java
@@ -57,6 +60,23 @@
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
+			<dependency>
+				<groupId>com.fasterxml.jackson.core</groupId>
+				<artifactId>jackson-core</artifactId>
+				<version>${jackson-core.version}</version>
+				<type>pom</type>
+				<scope>import</scope>
+			</dependency>
+			<dependency>
+				<groupId>org.yaml</groupId>
+				<artifactId>snakeyaml</artifactId>
+				<version>${snakeyaml.version}</version>
+			</dependency>
+			<dependency>
+				<groupId>com.fasterxml.woodstox</groupId>
+				<artifactId>woodstox-core</artifactId>
+				<version>${woodstox-core.version}</version>
+			</dependency>
 		</dependencies>
 	</dependencyManagement>