Fix CVE-2022-31690 (#5334)

Author: Corneil du Plessis

pom.xml

@@ -117,6 +117,12 @@
 	</modules>
 	<dependencyManagement>
 		<dependencies>
+			<!-- CVE-2022-31690 -->
+			<dependency>
+				<groupId>org.springframework.security</groupId>
+				<artifactId>spring-security-oauth2-client</artifactId>
+				<version>5.7.8</version>
+			</dependency>
 			<!-- address CVEs CVE-2022-41854, CVE-2022-38752, CVE-2022-38751, CVE-2022-38750, CVE-2022-38749, CVE-2022-25857 -->
 			<!-- CVE-2022-1471 remains but is address but using safe constructors -->
 			<dependency>

src/scripts/scdf-issues-2103

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+VALUES='
+2.10.3,spring-cloud-dataflow-build
+2.10.3,spring-cloud-dataflow-common
+2.8.3,spring-cloud-deployer
+2.8.3,spring-cloud-deployer-local
+2.8.3,spring-cloud-deployer-cloudfoundry
+2.8.3,spring-cloud-deployer-kubernetes
+1.8.3,spring-cloud-common-security-config
+2.9.3,spring-cloud-skipper
+3.3.3,spring-cloud-dataflow-ui
+2.10.3,spring-cloud-dataflow
+'
+
+
+for VALUE in $VALUES;
+  do
+    MILESTONE=$(echo $VALUE | cut -f1 -d,)
+    REPO=$(echo $VALUE | cut -f2 -d,)
+    TEMPLATE="{{range .}}spring-cloud/$REPO#{{.number}} {{.title}}{{\"\n\"}}{{end}}"
+    gh issue list --repo spring-cloud/$REPO --search milestone:$MILESTONE --state all
+done;