From bf8976d2bd8a35787859fcb79dcb4c76d60c65c5 Mon Sep 17 00:00:00 2001
From: GuangrongFu <fu.guangrong@zte.com.cn>
Date: Thu, 13 Jan 2022 15:59:08 +0800
Subject: Updated Vulnerable Dependencies

Issue-ID: HOLMES-510
Signed-off-by: GuangrongFu <fu.guangrong@zte.com.cn>
Change-Id: I5c2606aa4137fd1994a5ed60e45610f0a0aefd46
---
 pom.xml | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/pom.xml b/pom.xml
index 49a10cc..c7aa53c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -41,7 +41,7 @@
         <dropwizard.version>2.0.9</dropwizard.version>
         <swagger.version>1.6.1</swagger.version>
         <lombok.version>1.18.4</lombok.version>
-        <jersey.version>2.31</jersey.version>
+        <jersey.version>2.34</jersey.version>
         <slf4j.version>1.7.25</slf4j.version>
         <jacoco.version>0.8.5</jacoco.version>
         <sonar.coverage.jacoco.xmlReportPaths>
@@ -54,12 +54,18 @@
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-classic</artifactId>
-                <version>1.2.3</version>
+                <version>1.2.10</version>
             </dependency>
             <dependency>
                 <groupId>org.onap.msb.java-sdk</groupId>
                 <artifactId>msb-java-sdk</artifactId>
                 <version>1.2.5</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>com.fasterxml.jackson.core</groupId>
+                        <artifactId>jackson-databind</artifactId>
+                    </exclusion>
+                </exclusions>
             </dependency>
             <dependency>
                 <groupId>org.glassfish.jersey.containers</groupId>
@@ -158,7 +164,7 @@
             <dependency>
                 <groupId>com.google.code.gson</groupId>
                 <artifactId>gson</artifactId>
-                <version>2.8.6</version>
+                <version>2.8.9</version>
             </dependency>
         </dependencies>
     </dependencyManagement>
-- 
cgit 1.2.3-korg