Merge branch 'vuln-fix-tomcat' into 'master'

tomcat vuln fix

See merge request !136

provider/register-ibm/pom.xml

@@ -48,12 +48,39 @@
 		<groupId>org.opengroup.osdu</groupId>
 		<artifactId>os-core-common</artifactId>
     <version>${osdu.oscorecommon.version}</version>
+    <exclusions>
+    	<exclusion>
+    		<groupId>org.apache.tomcat.embed</groupId>
+    		<artifactId>tomcat-embed-core</artifactId>
+    	</exclusion>
+    </exclusions>
+	</dependency>
+	<dependency>
+		<groupId>org.apache.tomcat.embed</groupId>
+		<artifactId>tomcat-embed-core</artifactId>
+		<version>9.0.54</version>
+	</dependency>
+	<dependency>
+		<groupId>org.springframework.boot</groupId>
+		<artifactId>spring-boot-starter-web</artifactId>
+		<exclusions>
+			<exclusion>
+				<groupId>org.springframework.boot</groupId>
+				<artifactId>spring-boot-starter-tomcat</artifactId>
+			</exclusion>
+ 			</exclusions>
 	</dependency>
 
     <dependency>
       <groupId>org.opengroup.osdu</groupId>
       <artifactId>register-core</artifactId>
       <version>0.13.0-SNAPSHOT</version>
+      <exclusions>
+      	<exclusion>
+      		<groupId>org.apache.tomcat.embed</groupId>
+      		<artifactId>tomcat-embed-core</artifactId>
+      	</exclusion>
+      </exclusions>
     </dependency>