Merge "Update vulnerabilities for TCAGEN2"1.3.4-tca-gen2

6 files changed, 27 insertions, 4 deletions

diff --git a/ChangeLog.md b/ChangeLog.md
index 990c0d9..438e585 100644
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -6,6 +6,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [1.3.4] - 2022/07/28
          - [DCAEGEN2-2976](https://jira.onap.org/browse/DCAEGEN2-2976) - Support 7.2.1 VES in TCAGEN2
+         - [DCAEGEN2-3210](https://jira.onap.org/browse/DCAEGEN2-3210) - Update vulnerabilities for TCAGEN2
 
 ## [1.3.3] - 2022/05/24
          - [DCAEGEN2-3159](https://jira.onap.org/browse/DCAEGEN2-3159) - CodeCoverage improvement for dcaegen2-analytics-tca-gen2
diff --git a/dcae-analytics/dcae-analytics-model/pom.xml b/dcae-analytics/dcae-analytics-model/pom.xml
index 00613b5..44a3601 100644
--- a/dcae-analytics/dcae-analytics-model/pom.xml
+++ b/dcae-analytics/dcae-analytics-model/pom.xml
@@ -46,6 +46,8 @@
     <properties>
         <main.basedir>${project.parent.basedir}</main.basedir>
         <sdk.version>1.8.6</sdk.version>
+        <spring.version>5.3.20</spring.version>
+        <jackson.version>2.13.3</jackson.version>
         <immutable.version>2.7.1</immutable.version>
         <onap-gerrit-review>-changelog-missing</onap-gerrit-review>
     </properties>
@@ -62,14 +64,22 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
+            <version>${jackson.version}</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-core</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-annotations</artifactId>
+            <version>${jackson.version}</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.dataformat</groupId>
             <artifactId>jackson-dataformat-smile</artifactId>
+            <version>${jackson.version}</version>
         </dependency>
 
         <!-- JSON PATH -->
@@ -104,14 +114,17 @@
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-beans</artifactId>
+            <version>${spring.version}</version>
         </dependency>
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-context</artifactId>
+            <version>${spring.version}</version>
         </dependency>
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-webflux</artifactId>
+            <version>${spring.version}</version>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
diff --git a/dcae-analytics/dcae-analytics-tca-core/pom.xml b/dcae-analytics/dcae-analytics-tca-core/pom.xml
index 4921f84..5bd4f92 100644
--- a/dcae-analytics/dcae-analytics-tca-core/pom.xml
+++ b/dcae-analytics/dcae-analytics-tca-core/pom.xml
@@ -85,7 +85,7 @@
             <dependency>
                 <groupId>org.springframework</groupId>
                 <artifactId>spring-context</artifactId>
-                <version>5.0.11.RELEASE</version>
+                <version>5.3.20</version>
             </dependency>
         </dependencies>
     </dependencyManagement>
diff --git a/dcae-analytics/dcae-analytics-tca-web/pom.xml b/dcae-analytics/dcae-analytics-tca-web/pom.xml
index 4ee9e50..37fc02f 100644
--- a/dcae-analytics/dcae-analytics-tca-web/pom.xml
+++ b/dcae-analytics/dcae-analytics-tca-web/pom.xml
@@ -45,7 +45,7 @@
 
     <properties>
             <main.basedir>${project.parent.basedir}</main.basedir>
-            <undertow-core.version>2.2.14.Final</undertow-core.version>
+            <undertow-core.version>2.2.17.Final</undertow-core.version>
             <docker.image.name>onap/${project.groupId}.${project.artifactId}</docker.image.name>
             <onap-gerrit-review>-changelog-missing</onap-gerrit-review>
     <maven.build.timestamp.format>yyyyMMdd'T'HHmmss</maven.build.timestamp.format>
diff --git a/dcae-analytics/dcae-analytics-test/pom.xml b/dcae-analytics/dcae-analytics-test/pom.xml
index 14f8ce4..7ab5b75 100644
--- a/dcae-analytics/dcae-analytics-test/pom.xml
+++ b/dcae-analytics/dcae-analytics-test/pom.xml
@@ -43,6 +43,7 @@
 
     <properties>
          <main.basedir>${project.parent.basedir}</main.basedir>
+         <jackson.version>2.13.3</jackson.version>
          <onap-gerrit-review>-changelog-missing</onap-gerrit-review>
     </properties>
 
@@ -80,17 +81,25 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
+            <version>${jackson.version}</version>
             <scope>compile</scope>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-core</artifactId>
+            <version>${jackson.version}</version>
             <scope>compile</scope>
         </dependency>
         <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-annotations</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
+        <dependency>
            <groupId>com.fasterxml.jackson.dataformat</groupId>
            <artifactId>jackson-dataformat-smile</artifactId>
-            <scope>compile</scope>
+           <version>${jackson.version}</version>
+           <scope>compile</scope>
         </dependency>
 
         <!-- JUNIT 5 DEPENDENCIES -->
diff --git a/dcae-analytics/dcae-analytics-web/pom.xml b/dcae-analytics/dcae-analytics-web/pom.xml
index 3c09734..8108ec4 100644
--- a/dcae-analytics/dcae-analytics-web/pom.xml
+++ b/dcae-analytics/dcae-analytics-web/pom.xml
@@ -44,7 +44,7 @@
 
     <properties>
             <main.basedir>${project.parent.basedir}</main.basedir>
-            <undertow-core.version>2.2.14.Final</undertow-core.version>
+            <undertow-core.version>2.2.17.Final</undertow-core.version>
             <httpclient.version>4.5.13</httpclient.version>
             <onap-gerrit-review>-changelog-missing</onap-gerrit-review>
     </properties>