FINERACT-2326: Upgrade dependencies

Author: adamsaghy

buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle

@@ -25,15 +25,13 @@ dependencyManagement {
         mavenBom 'com.squareup.okhttp3:okhttp-bom:4.12.0'
         mavenBom 'org.slf4j:slf4j-bom:2.0.17'
         mavenBom 'io.micrometer:micrometer-bom:1.13.6'
-        mavenBom 'org.springframework:spring-framework-bom:6.2.10'
         mavenBom 'org.springframework.boot:spring-boot-dependencies:3.5.5'
         mavenBom 'io.awspring.cloud:spring-cloud-aws-dependencies:3.2.1'
         mavenBom 'io.opentelemetry:opentelemetry-bom:1.44.1'
         mavenBom 'org.jetbrains.kotlin:kotlin-bom:2.0.21'
         mavenBom 'org.junit:junit-bom:5.11.3'
         mavenBom 'com.fasterxml.jackson:jackson-bom:2.18.3'
         mavenBom 'io.cucumber:cucumber-bom:7.20.1'
-        mavenBom 'io.netty:netty-bom:4.1.125.Final'
         mavenBom 'org.mockito:mockito-bom:5.14.2'
         mavenBom 'software.amazon.awssdk:bom:2.29.9'
         mavenBom 'io.github.resilience4j:resilience4j-bom:2.2.0'
@@ -275,5 +273,11 @@ dependencyManagement {
         dependency 'org.yakworks:spring-icu4j:0.4.2'
         dependency 'org.apache.commons:commons-lang3:3.18.0'
         dependency 'com.nimbusds:nimbus-jose-jwt:10.0.2'
+        // Force Spring Framework version: https://spring.io/security/cve-2025-41249
+        dependency 'org.springframework:spring-core:6.2.11'
+        // Force Spring Framework version: https://spring.io/security/cve-2025-41248
+        dependency 'org.springframework.security:spring-security-core:6.5.4'
+        // Force netty-codec version: https://scout.docker.com/vulnerabilities/id/CVE-2025-58057
+        dependency 'io.netty:netty-codec:4.1.125.Final'
     }
 }