Merge pull request #535 from cap-java/RBSDMS-sdmSecurityFix-feature

PujaDeshmukh17 · web-flow · commit fcdd7fab3069 · 2026-07-10T13:59:39.000+05:30
Security Fixes for security vulnerabilities
diff --git a/sdm/pom.xml b/sdm/pom.xml
@@ -39,14 +39,15 @@
         <jacoco.version>0.8.7</jacoco.version>
         <ehcache-version>3.10.8</ehcache-version>
         <token-client-version>3.5.7</token-client-version>
-        <jackson-databind-version>2.18.6</jackson-databind-version>
+        <jackson-databind-version>2.18.9</jackson-databind-version>
         <json-version>20250107</json-version>
         <commons-codec-version>1.18.0</commons-codec-version>
         <jackson-core-version>2.18.6</jackson-core-version>
         <mockito-junit-jupiter-version>5.15.2</mockito-junit-jupiter-version>
         <httpclient5-version>5.4.4</httpclient5-version>
-        <httpcore5-version>5.3.3</httpcore5-version>
+        <httpcore5-version>5.4.3</httpcore5-version>
         <httpasyncclient-version>4.1.5</httpasyncclient-version>
+        <httpcore-nio-version>4.4.16</httpcore-nio-version>
         <log4j-api-version>3.0.0-beta2</log4j-api-version>
         <rxjava-version>2.2.21</rxjava-version>
     </properties>
@@ -110,6 +111,11 @@
         <artifactId>httpcore5</artifactId>
         <version>${httpcore5-version}</version>
     </dependency>
+    <dependency>
+        <groupId>org.apache.httpcomponents.core5</groupId>
+        <artifactId>httpcore5-h2</artifactId>
+        <version>${httpcore5-version}</version>
+    </dependency>
 
 <dependency>
     <groupId>org.apache.httpcomponents</groupId>
@@ -122,6 +128,11 @@
         </exclusion>
     </exclusions>
 </dependency>
+<dependency>
+    <groupId>org.apache.httpcomponents</groupId>
+    <artifactId>httpcore-nio</artifactId>
+    <version>${httpcore-nio-version}</version>
+</dependency>
 <!-- Log4j dependencies -->
 <!-- https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-api -->
 <dependency>
