[#MS39713] fix: remediate high vulnerabilities

Change details

• Remediate High vulnerabilities for [spring-web,spring-security-core, plexus-utils, guava]

Issue Details:

Core

1. plexus-utils : https://community.opengroup.org/osdu/platform/system/indexer-service/-/security/vulnerabilities/30841
2. guava : https://community.opengroup.org/osdu/platform/system/indexer-service/-/security/vulnerabilities/28978

Core-plus

1. guava : https://community.opengroup.org/osdu/platform/system/indexer-service/-/security/vulnerabilities/34089
2. plexus-utils: https://community.opengroup.org/osdu/platform/system/indexer-service/-/security/vulnerabilities/34088

Azure

1. spring-security-core https://community.opengroup.org/osdu/platform/system/indexer-service/-/security/vulnerabilities/36374 https://community.opengroup.org/osdu/platform/system/indexer-service/-/security/vulnerabilities/34983
2. spring-web https://community.opengroup.org/osdu/platform/system/indexer-service/-/security/vulnerabilities/35738 https://community.opengroup.org/osdu/platform/system/indexer-service/-/security/vulnerabilities/34990 https://community.opengroup.org/osdu/platform/system/indexer-service/-/security/vulnerabilities/34665
3. plexus-utils https://community.opengroup.org/osdu/platform/system/indexer-service/-/security/vulnerabilities/30840
4. jdom https://community.opengroup.org/osdu/platform/system/indexer-service/-/security/vulnerabilities/16532
5. velocity https://community.opengroup.org/osdu/platform/system/indexer-service/-/security/vulnerabilities/16531

changed milestone to %M24 - Release 0.27

added Azure Common Code labels

assigned to @thulasi_dass

changed the description

added 1 commit

• c3a5639d - Update NOTICE

Compare with previous version

marked this merge request as ready

changed the description

changed the description

added 5 commits

• c3a5639d...46000c1d - 4 commits from branch master
• 34d26001 - Merge branch 'master' into az/td-fix-m24-high-vuln

Compare with previous version

approved this merge request

Hello @chad Kindly review & approve the vulnerability remediation MR.

Pipeline IT failures [aws-test,core-test,ibm-test] same failures observed in master branch as well.

Thanks

cc: @ajojohnk @lucynliu @danielscholl

added MRDependencies Upgrade Vulnerability Management labels

@ydzeng @ishakumari - okay to proceed ?

approved this merge request

seems like also failure in master. feel free to merge

merged

mentioned in commit fdf30079

Hello Team,

Merging security vulnerability fixes with passing pipelines (azure only change) as per policy.

cc: @chad

Thanks.