diff options
| -rw-r--r-- | pom.xml | 23 |
1 files changed, 17 insertions, 6 deletions
@@ -251,7 +251,7 @@ <dependency> <groupId>org.apache.commons</groupId> <artifactId>commons-vfs2</artifactId> - <version>2.0</version> + <version>2.2</version> </dependency> <dependency> <groupId>joda-time</groupId> @@ -293,11 +293,6 @@ <artifactId>hibernate-annotations</artifactId> <version>3.5.6-Final</version> </dependency> - <!-- <dependency> --> - <!-- <groupId>org.apache.geronimo.specs</groupId> --> - <!-- <artifactId>geronimo-jpa_2.0_spec</artifactId> --> - <!-- <version>1.1</version> --> - <!-- </dependency> --> <dependency> <groupId>dom4j</groupId> <artifactId>dom4j</artifactId> @@ -464,6 +459,22 @@ <artifactId>jsf-impl</artifactId> <version>2.1.7</version> </dependency> + <!-- Other dependencies to fix nexus IQ reported vulnerabilities --> + <dependency> + <groupId>org.codehaus.plexus</groupId> + <artifactId>plexus-utils</artifactId> + <version>3.0.24</version> + </dependency> + <dependency> + <groupId>commons-fileupload</groupId> + <artifactId>commons-fileupload</artifactId> + <version>1.3.3</version> + </dependency> + <dependency> + <groupId>org.jboss.spec.javax.ws.rs</groupId> + <artifactId>jboss-jaxrs-api_2.0_spec</artifactId> + <version>1.0.1.Final</version> + </dependency> <!-- Remove the MYSQL connector and replace it by Mariadb --> <dependency> <groupId>org.mariadb.jdbc</groupId> |