Merge branch 'vuln-fix-lucene' into 'master'

Vuln fix lucene

See merge request !150

provider/notification-ibm/pom.xml

@@ -45,8 +45,27 @@
             <groupId>org.opengroup.osdu</groupId>
             <artifactId>os-core-lib-ibm</artifactId>
             <version>0.13.0-rc6</version>
+            <exclusions>
+            	<exclusion>
+            		<groupId>org.apache.lucene</groupId>
+            		<artifactId>lucene-core</artifactId>
+            	</exclusion>
+            	<exclusion>
+            		<groupId>org.yaml</groupId>
+            		<artifactId>snakeyaml</artifactId>
+            	</exclusion>
+            </exclusions>
         </dependency>
-
+        <dependency>
+        	<groupId>org.yaml</groupId>
+            <artifactId>snakeyaml</artifactId>
+            <version>1.26</version>
+        </dependency>
+		<dependency>
+			<groupId>org.apache.lucene</groupId>
+            <artifactId>lucene-core</artifactId>
+            <version>8.10.0</version>
+		</dependency>
         <dependency>
             <groupId>org.opengroup.osdu</groupId>
             <artifactId>notification-core</artifactId>