Merge branch 'security-vulns' into 'master'

Fixed security issues (GONRG-5608)

Closes osdu/platform/security-and-compliance/home#87

See merge request !260

partition-core/pom.xml

@@ -50,6 +50,21 @@
 				<artifactId>jackson-databind</artifactId>
 				<version>${jackson-databind.version}</version>
 			</dependency>
+			<dependency>
+				<groupId>xerces</groupId>
+				<artifactId>xercesImpl</artifactId>
+				<version>2.12.2</version>
+			</dependency>
+			<dependency>
+				<groupId>org.apache.maven.reporting</groupId>
+				<artifactId>maven-reporting-impl</artifactId>
+				<version>3.2.0</version>
+			</dependency>
+			<dependency>
+				<groupId>org.springframework</groupId>
+				<artifactId>spring-core</artifactId>
+				<version>5.3.20</version>
+			</dependency>
 		</dependencies>
 	</dependencyManagement>
 

provider/partition-aws/pom.xml

@@ -50,6 +50,11 @@
                 <artifactId>jackson-databind</artifactId>
                 <version>2.13.2.2</version>
             </dependency>
+            <dependency>
+                <groupId>org.springframework</groupId>
+                <artifactId>spring-core</artifactId>
+                <version>5.3.20</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 

provider/partition-azure/pom.xml

@@ -61,6 +61,11 @@
           <artifactId>jackson-databind</artifactId>
           <version>2.13.2.2</version>
       </dependency>
+      <dependency>
+        <groupId>org.springframework</groupId>
+        <artifactId>spring-core</artifactId>
+        <version>5.3.20</version>
+      </dependency>
     </dependencies>
   </dependencyManagement>
 

provider/partition-gcp/pom.xml

@@ -45,6 +45,7 @@
     <dependency>
       <groupId>org.springframework.security</groupId>
       <artifactId>spring-security-oauth2-client</artifactId>
+      <version>5.6.4</version>
     </dependency>
     <dependency>
       <groupId>org.springframework.security</groupId>
@@ -135,6 +136,11 @@
         <artifactId>google-http-client</artifactId>
         <version>1.39.0</version>
       </dependency>
+        <dependency>
+          <groupId>com.google.oauth-client</groupId>
+          <artifactId>google-oauth-client</artifactId>
+          <version>1.33.3</version>
+        </dependency>
     </dependencies>
   </dependencyManagement>
 

provider/partition-ibm/pom.xml

@@ -30,6 +30,11 @@
                 <artifactId>jackson-databind</artifactId>
                 <version>2.13.2.2</version>
             </dependency>
+            <dependency>
+                <groupId>org.springframework</groupId>
+                <artifactId>spring-core</artifactId>
+                <version>5.3.20</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>