[JS2-1371] Security Vulnerabilities Update

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 2.3.1
• Fix Version/s: 2.3.2
• Component/s: Dependencies
• Assignee: David Sean Taylor
• Reporter: David Sean Taylor
• Created: 06/Jan/21 18:49
• Updated: 06/Jan/21 18:49

Description

The following direct dependencies have been highlighted as having security
vulnerabilities (along with the suggested remediation):

Apache Commons BeanUtils 1.9.2 (update to 1.9.4)
Apache Commons FileUpload 1.3.1 (update to 1.4)
Apache CXF 2.2.5 (update to cxf-3.4.1)
Apache Lucene 3.1.0 (update to 8.7.0)
Apache lucene-solr 3.1.0 (update to 8.7.0)
Castor 1.1.1 (update to 1.4.1)
dom4j 1.6.1 (update to 20040902.021138)
slf4j 1.5.6 (update to 1.7.30)
Spring-core 3.2.9RELEASE (update to 5.3.2)
Spring-aop 3.2.9.RELEASE (update to 5.3.2)
Spring-beans 3.2.9.RELEASE (update to 5.3.2)
Spring-context 3.2.9.RELEASE (update to 5.3.2)
Spring-context-support 3.2.9.RELEASE (update to 5.3.2)
Spring-web 3.2.9.RELEASE (update to 5.3.2)
Spring-orm 3.2.9.RELEASE (update to 5.3.2)
Spring-jdbc 3.2.9.RELEASE (update to 5.3.2)
Spring-ldap 1.3.0 (update to 2.0.3)