Ibm and core vul fix

Fixed High and critical vul CVE-2015-7501

provider/unit-ibm/unit-ocp/pom.xml

@@ -65,7 +65,7 @@
 		<dependency>
 			<groupId>org.springframework</groupId>
 			<artifactId>spring-web</artifactId>
-			<version>6.1.5</version>
+			<version>6.1.6</version>
 		</dependency>
 		<dependency>
 			<groupId>com.google.code.gson</groupId>
@@ -86,7 +86,13 @@
 		<dependency>
 			<groupId>ch.qos.logback</groupId>
 			<artifactId>logback-classic</artifactId>
-			<version>1.4.14</version>
+			<version>1.5.6</version>
+			<exclusions>
+				<exclusion>
+					<groupId>org.dom4j</groupId>
+					<artifactId>dom4j</artifactId>
+				</exclusion>
+			</exclusions>
 		</dependency>
 		<dependency>
 			<groupId>org.opengroup.osdu</groupId>
@@ -105,6 +111,10 @@
 					<groupId>software.amazon.ion</groupId>
 					<artifactId>ion-java</artifactId>
 				</exclusion>
+				<exclusion>
+					<groupId>org.springframework</groupId>
+					<artifactId>spring-web</artifactId>
+				</exclusion>
 			</exclusions>
 		</dependency>
 		<!-- https://mvnrepository.com/artifact/io.netty/netty-codec-http -->
@@ -129,19 +139,19 @@
 					<artifactId>spring-boot-starter-tomcat</artifactId>
 				</exclusion>
 
-					<exclusion>
-						<groupId>org.springframework</groupId>
-						<artifactId>spring-web</artifactId>
-					</exclusion>
-				</exclusions>
+				<exclusion>
+					<groupId>org.springframework</groupId>
+					<artifactId>spring-web</artifactId>
+				</exclusion>
+			</exclusions>
 
 		</dependency>
 		<dependency>
-    	    <groupId>com.fasterxml.jackson.core</groupId>
-    	    <artifactId>jackson-databind</artifactId>
-   		    <version>${jackson-databind.version}</version>
-	    </dependency>
-	    <dependency>
+			<groupId>com.fasterxml.jackson.core</groupId>
+			<artifactId>jackson-databind</artifactId>
+			<version>${jackson-databind.version}</version>
+		</dependency>
+		<dependency>
 			<groupId>io.netty</groupId>
 			<artifactId>netty-codec</artifactId>
 			<version>4.1.86.Final</version>
@@ -154,7 +164,13 @@
 		<dependency>
 			<groupId>org.springframework.security</groupId>
 			<artifactId>spring-security-config</artifactId>
-			<version>6.0.7</version>
+			<version>6.2.3</version>
+			<exclusions>
+				<exclusion>
+					<groupId>org.springframework.security</groupId>
+					<artifactId>spring-security-core</artifactId>
+				</exclusion>
+			</exclusions>
 		</dependency>
 		<dependency>
 			<groupId>jakarta.inject</groupId>
@@ -195,6 +211,10 @@
 						<groupId>org.springframework</groupId>
 						<artifactId>spring-web</artifactId>
 					</exclusion>
+					<exclusion>
+						<groupId>org.springframework.security</groupId>
+						<artifactId>spring-security-core</artifactId>
+					</exclusion>
 				</exclusions>
 			</dependency>
 			<!-- Add other io.netty dependencies with version 4.1.109.Final here -->
@@ -206,19 +226,19 @@
 				<groupId>org.springframework.boot</groupId>
 				<artifactId>spring-boot-maven-plugin</artifactId>
 				<version>3.2.2</version>
-				  <executions>
-                    <execution>
-                        <goals>
-                            <goal>repackage</goal>
-                        </goals>
-                        <configuration>
-                            <classifier>spring-boot</classifier>
-                            <mainClass>
-                               org.opengroup.osdu.unitservice.UomOcpApplication
-                            </mainClass>
-                        </configuration>
-                    </execution>
-                </executions>
+				<executions>
+					<execution>
+						<goals>
+							<goal>repackage</goal>
+						</goals>
+						<configuration>
+							<classifier>spring-boot</classifier>
+							<mainClass>
+								org.opengroup.osdu.unitservice.UomOcpApplication
+							</mainClass>
+						</configuration>
+					</execution>
+				</executions>
 			</plugin>
 			<plugin>
 				<artifactId>maven-surefire-plugin</artifactId>