Merge pull request #394 from bcgov/feature/FLA-1576-vulnerabilities

fix vulnerabilities for image jag-ai-reviewer-ai-reviewer-api's and j…
bcgov · Oct 25, 2024 · a4e1221 · a4e1221
2 parents 1cd8a8d + ed90936
commit a4e1221
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 4 deletions.
diff --git a/src/backend/ai-reviewer-api/pom.xml b/src/backend/ai-reviewer-api/pom.xml
@@ -5,7 +5,7 @@
 	<parent>
 		<artifactId>spring-boot-starter-parent</artifactId>
 		<groupId>org.springframework.boot</groupId>
-		<version>3.2.5</version>
+		<version>3.3.4</version>
 		<relativePath/>
 	</parent>
 	<groupId>ca.bc.gov.open.jag</groupId>
@@ -48,6 +48,7 @@
 		<dependency>
 			<groupId>ch.qos.logback</groupId>
 			<artifactId>logback-access</artifactId>
+			<version>1.4.14</version>
 		</dependency>
 
 		<dependency>

diff --git a/src/backend/ai-reviewer-mock-api/pom.xml b/src/backend/ai-reviewer-mock-api/pom.xml
@@ -5,7 +5,7 @@
 	<parent>
 		<groupId>org.springframework.boot</groupId>
 		<artifactId>spring-boot-starter-parent</artifactId>
-		<version>3.2.5</version>
+		<version>3.3.4</version>
 		<relativePath/> <!-- lookup parent from repository -->
 	</parent>
 	<groupId>ca.bc.gov.open.jag</groupId>

diff --git a/src/backend/libs/ai-bom/pom.xml b/src/backend/libs/ai-bom/pom.xml
@@ -14,8 +14,8 @@
         <com.github.joschi.jackson.version>2.12.2</com.github.joschi.jackson.version>
         <com.google.code.findbugs.version>3.0.2</com.google.code.findbugs.version>
         <com.splunk.logging.version>1.11.1</com.splunk.logging.version>
-        <commons-io.version>2.13.0</commons-io.version>
-        <io.springfox.version>2.9.2</io.springfox.version>
+        <commons-io.version>2.16.1</commons-io.version>
+        <io.springfox.version>2.10.0</io.springfox.version>
         <io.swagger.version>2.2.9</io.swagger.version>
         <java.version>17</java.version>
         <javax.validation.version>2.0.1.Final</javax.validation.version>