High vul fix ibm

provider/search-ibm/pom.xml

@@ -73,7 +73,7 @@
 		<dependency>
 			<groupId>com.nimbusds</groupId>
 			<artifactId>nimbus-jose-jwt</artifactId>
-			<version>7.9</version>
+			<version>9.37.2</version>
 		</dependency>
 		<dependency>
 			<groupId>org.opengroup.osdu</groupId>
@@ -88,6 +88,10 @@
 					<groupId>org.apache.lucene</groupId>
 					<artifactId>lucene-core</artifactId>
 				</exclusion>
+				<exclusion>
+					<groupId>io.netty</groupId>
+					<artifactId>netty-handler</artifactId>
+				</exclusion>
 			</exclusions>
 		</dependency>
 		<dependency>
@@ -99,6 +103,11 @@
 			<groupId>io.netty</groupId>
 			<artifactId>netty-codec</artifactId>
 		</dependency>
+		<dependency>
+			<groupId>io.netty</groupId>
+			<artifactId>netty-handler</artifactId>
+			<version>4.1.118.Final</version>
+		</dependency>
 
 		<dependency>
 			<groupId>org.opengroup.osdu</groupId>
@@ -116,7 +125,11 @@
 				<exclusion>
 					<groupId>com.ibm.cos</groupId>
 					<artifactId>ibm-cos-java-sdk</artifactId>
-				</exclusion>  
+				</exclusion>
+				<exclusion>
+					<groupId>io.netty</groupId>
+					<artifactId>netty-handler</artifactId>
+				</exclusion>
 			</exclusions>
 		</dependency>
 
@@ -125,11 +138,6 @@
 			<artifactId>spring-boot-starter-security</artifactId>
 		</dependency>
 
-		<dependency>
-			<groupId>org.springframework.security</groupId>
-			<artifactId>spring-security-jwt</artifactId>
-			<version>1.0.10.RELEASE</version>
-		</dependency>
 		<dependency>
 			<groupId>org.springframework.security</groupId>
 			<artifactId>spring-security-oauth2-client</artifactId>
@@ -211,6 +219,12 @@
 		<dependency>
 		    <groupId>io.netty</groupId>
 		    <artifactId>netty-codec-http</artifactId>
+			<exclusions>
+			<exclusion>
+				<groupId>io.netty</groupId>
+				<artifactId>netty-handler</artifactId>
+			</exclusion>
+			</exclusions>
 		</dependency>
 	</dependencies>
 

testing/integration-tests/search-test-ibm/pom.xml

@@ -17,7 +17,7 @@
 		<maven.compiler.target>17</maven.compiler.target>
 		<maven.compiler.source>17</maven.compiler.source>
 		<cucumber.version>1.2.5</cucumber.version>
-		<os-core-lib-ibm.version>0.25.1</os-core-lib-ibm.version>
+		<os-core-lib-ibm.version>0.27.0-rc2</os-core-lib-ibm.version>
 		<argLine>
 			--add-opens=java.base/java.util=ALL-UNNAMED
 			--add-opens java.base/java.lang=ALL-UNNAMED