[MS-44095] Remediate tomcat vulnerability
- issue references: https://community.opengroup.org/osdu/platform/data-flow/ingestion/csv-parser/csv-parser/-/issues/232 https://community.opengroup.org/osdu/platform/data-flow/ingestion/csv-parser/csv-parser/-/issues/231 https://community.opengroup.org/osdu/platform/data-flow/ingestion/csv-parser/csv-parser/-/issues/230 https://community.opengroup.org/osdu/platform/data-flow/ingestion/csv-parser/csv-parser/-/issues/226 https://community.opengroup.org/osdu/platform/data-flow/ingestion/csv-parser/csv-parser/-/issues/227
- update spring-boot version to
3.3.1
to remediate tomcat vulnerability. - update core-lib-azure-spring6 to
0.27.0-rc3
.
mvn dependency:tree
before changes:
[INFO] | +- org.springframework.boot:spring-boot-starter-tomcat:jar:3.2.5:compile
[INFO] | | +- org.apache.tomcat.embed:tomcat-embed-core:jar:10.1.20:compile
[INFO] | | +- org.apache.tomcat.embed:tomcat-embed-el:jar:10.1.20:compile
[INFO] | | \- org.apache.tomcat.embed:tomcat-embed-websocket:jar:10.1.20:compile
mvn dependency:tree
after changes:
[INFO] | | +- org.springframework.boot:spring-boot-starter-tomcat:jar:3.3.1:compile
[INFO] | | | +- org.apache.tomcat.embed:tomcat-embed-core:jar:10.1.25:compile
[INFO] | | | +- org.apache.tomcat.embed:tomcat-embed-el:jar:10.1.25:compile
[INFO] | | | \- org.apache.tomcat.embed:tomcat-embed-websocket:jar:10.1.25:compile
Edited by VidyaDharani Lokam