Vulnerability Fixing and POM Reorganization
Compare changes
Files
2+ 9
− 8
@@ -93,6 +93,10 @@
@@ -128,6 +132,11 @@
@@ -140,14 +149,6 @@
pom.xml
This PR addresses vulnerabilities in multiple libraries, including critical and high-severity issues. Below is the delta of vulnerabilities that were present in the previous scan but have been resolved in the current state.
com.azure:azure-identity
1.11.2
to 1.12.2
.com.nimbusds:nimbus-jose-jwt
p2c
header value causes Denial of Service.9.30.2
to 9.37.2
.org.asynchttpclient:async-http-client
CookieStore
replaces explicitly defined cookies, leading to potential security issues.2.12.1
to 2.12.4
.io.lettuce:lettuce-core
6.3.2.RELEASE
to 6.5.1.RELEASE
.By upgrading these libraries to their secure versions, this PR significantly improves the project's security posture by mitigating critical and high-risk vulnerabilities. Please review and approve.