CVE fixes

payneteasy · Jan 22, 2024 · a0f35dd · a0f35dd
1 parent c05ccc7
commit a0f35dd
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -437,7 +437,7 @@
             <dependency>
                 <groupId>commons-io</groupId>
                 <artifactId>commons-io</artifactId>
-                <version>2.11.0</version>
+                <version>2.15.1</version>
             </dependency>
             <dependency>
                 <groupId>com.warrenstrange</groupId>
@@ -457,7 +457,7 @@
             <dependency>
                 <groupId>commons-codec</groupId>
                 <artifactId>commons-codec</artifactId>
-                <version>1.15</version>
+                <version>1.16.0</version>
             </dependency>
             <dependency>
                 <!--override googleauth's httpclient version-->

diff --git a/src/main/dependency-check/suppressions.xml b/src/main/dependency-check/suppressions.xml
@@ -143,6 +143,13 @@
         <sha1>3a3f6d8e593bce5624bfe0aa4a898bc1826d621a</sha1>
         <cve>CVE-2018-1258</cve>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: spring-security-config-5.5.8.jar
+        ]]></notes>
+        <sha1>0d718f457cba424663223fbd27e7704ceb9cfee4</sha1>
+        <cve>CVE-2018-1258</cve>
+    </suppress>