Merge pull request #1464 from eclipse-tractusx/chore/1463-fix-cves

chore(1463): bump spring-security-core and apache-tomcat-embed version.

Author: ds-mwesener

pom.xml

@@ -92,8 +92,9 @@ SPDX-License-Identifier: Apache-2.0
         <micrometer.version>1.11.4</micrometer.version>
         <irs-client-lib.version>3.0.2</irs-client-lib.version>
         <json-schema-validator.version>5.4.0</json-schema-validator.version>
-        <apache-tomcat-embed.version>11.0.5</apache-tomcat-embed.version>
+        <apache-tomcat-embed.version>11.0.7</apache-tomcat-embed.version>
         <spring-security-crypto.version>6.4.4</spring-security-crypto.version>
+        <spring-security-core-version>6.5.0</spring-security-core-version>
         <!-- Sonar related properties -->
         <sonar.java.coveragePlugin>jacoco</sonar.java.coveragePlugin>
         <sonar.dynamicAnalysis>reuseReports</sonar.dynamicAnalysis>
@@ -119,6 +120,11 @@ SPDX-License-Identifier: Apache-2.0
             <version>${lombok.version}</version>
             <optional>true</optional>
         </dependency>
+        <dependency>
+            <groupId>org.springframework.security</groupId>
+            <artifactId>spring-security-core</artifactId>
+            <version>${spring-security-core-version}</version>
+        </dependency>
         <!-- Test Dependencies -->
         <dependency>
             <groupId>org.assertj</groupId>