Merge pull request #1761 from lat-lon/fix/3.5-primefacesCVE

Upgraded Primefaces to latest bugfix version 14.0.6 to resolve critical CVE (3.5)

deegree-services/deegree-webservices/pom.xml

@@ -278,12 +278,12 @@
     <dependency>
       <groupId>org.primefaces</groupId>
       <artifactId>primefaces</artifactId>
-      <version>13.0.6</version>
+      <version>14.0.6</version>
     </dependency>
     <dependency>
       <groupId>org.primefaces.extensions</groupId>
       <artifactId>primefaces-extensions</artifactId>
-      <version>13.0.6</version>
+      <version>14.0.6</version>
     </dependency>
     <dependency>
       <groupId>org.slf4j</groupId>

pom.xml

@@ -1231,7 +1231,7 @@
     <slf4j.version>1.7.36</slf4j.version>
     <spring-boot.version>2.7.18</spring-boot.version>
     <spring-batch.version>4.3.10</spring-batch.version>
-    <spring-framework.version>5.3.36</spring-framework.version>
+    <spring-framework.version>5.3.39</spring-framework.version>
     <batik.version>1.17</batik.version>
     <axoim.version>1.2.22</axoim.version>
     <jsonpath.version>2.9.0</jsonpath.version>
@@ -1319,7 +1319,7 @@
           <plugin>
             <groupId>org.owasp</groupId>
             <artifactId>dependency-check-maven</artifactId>
-            <version>9.0.9</version>
+            <version>11.1.0</version>
             <configuration>
               <cveValidForHours>24</cveValidForHours>
               <knownExploitedEnabled>false</knownExploitedEnabled>