Skip to content

Commit ebee12f

Browse files
SelahattinSertSelahattinSert
committed
Update dependencies and suppress CVEs
1 parent 31f5282 commit ebee12f

File tree

2 files changed

+11
-67
lines changed

2 files changed

+11
-67
lines changed

‎owasp-suppressions.xml‎

Lines changed: 6 additions & 63 deletions
Original file line numberDiff line numberDiff line change
@@ -1,95 +1,42 @@
11
<?xml version="1.0" encoding="UTF-8"?>
22
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
33
<!-- azure-identity-1.13.1 -->
4-
<!-- com.azure.spring:spring-cloud-azure-starter@5.15.0 -->
4+
<!-- com.azure.spring:spring-cloud-azure-starter@5.18.0 -->
55
<suppress>
66
<cve>CVE-2023-36415</cve>
7+
</suppress>
8+
<suppress>
79
<cve>CVE-2024-35255</cve>
810
</suppress>
911
<!-- commons-lang3-3.14.0.jar -->
1012
<!-- org.liquibase:liquibase-core@4.27.0 -->
1113
<suppress>
1214
<cve>CVE-2025-48924</cve>
1315
</suppress>
14-
<!-- json-smart-2.5.1 -->
15-
<!-- org.springframework.boot:spring-boot-starter-test@3.3.1 -->
16-
<suppress>
17-
<cve>CVE-2024-57699</cve>
18-
</suppress>
19-
<!-- logback-core-1.5.6 -->
20-
<!-- org.springframework.boot:spring-boot-starter-logging@3.3.1 -->
21-
<suppress>
22-
<cve>CVE-2024-12798</cve>
23-
<cve>CVE-2024-12801</cve>
24-
</suppress>
25-
<!-- msal4j-1.16.1 -->
26-
<!-- com.azure.spring:spring-cloud-azure-starter@5.15.0 -->
27-
<suppress>
28-
<cve>CVE-2024-35255</cve>
29-
</suppress>
3016
<!-- netty-transport-4.1.111.Final.jar -->
3117
<suppress>
3218
<cve>CVE-2025-55163</cve>
3319
<cve>CVE-2025-58056</cve>
3420
<cve>CVE-2025-58057</cve>
3521
</suppress>
36-
<!-- netty-common-4.1.111.Final -->
37-
<!-- com.azure:azure-storage-blob@12.27.1 -->
38-
<suppress>
39-
<cve>CVE-2024-47535</cve>
40-
</suppress>
4122
<!-- netty-handler-4.1.111.Final -->
4223
<!-- com.azure:azure-storage-blob@12.27.1 -->
4324
<suppress>
4425
<cve>CVE-2025-24970</cve>
4526
</suppress>
46-
<!-- nimbus-jose-jwt-9.37.3.jar (shaded: com.google.code.gson:gson:2.10.1) -->
47-
<suppress>
48-
<cve>CVE-2025-53864</cve>
49-
</suppress>
50-
<!-- reactor-netty-http-1.1.20.jar -->
51-
<!-- com.azure:azure-storage-blob@12.27.1 -->
52-
<suppress>
53-
<cve>CVE-2025-22227</cve>
54-
</suppress>
55-
<!-- spring-cloud-azure-starter-storage-queue-5.15.0 -->
56-
<!-- com.azure.spring:spring-cloud-azure-starter-storage@5.15.0 -->
27+
<!-- spring-cloud-azure-starter-storage-queue-5.18.0 -->
28+
<!-- com.azure.spring:spring-cloud-azure-starter-storage@5.18.0 -->
5729
<suppress>
5830
<cve>CVE-2022-30187</cve>
5931
<cve>CVE-2025-25193</cve>
6032
</suppress>
61-
<!-- spring-context-6.1.10.jar -->
62-
<!-- org.springframework.boot:spring-boot-starter-web@3.3.1 -->
63-
<suppress>
64-
<cve>CVE-2025-22233</cve>
65-
</suppress>
66-
<!-- spring-core-6.1.10 -->
67-
<!-- org.springframework.boot:spring-boot-starter-test@3.3.1 -->
68-
<suppress>
69-
<cve>CVE-2024-38820</cve>
70-
<cve>CVE-2025-41249</cve>
71-
<cve>CVE-2025-41242</cve>
72-
</suppress>
73-
<!-- spring-web-6.1.10.jar -->
74-
<!-- org.springframework.boot:spring-boot-starter-web@3.3.1 -->
75-
<suppress>
76-
<cve>CVE-2024-38809</cve>
77-
<cve>CVE-2024-38820</cve>
78-
<cve>CVE-2025-41234</cve>
79-
</suppress>
80-
<!-- spring-webmvc-6.1.10 -->
81-
<!-- org.springframework.boot:spring-boot-starter-web@3.3.1 -->
82-
<suppress>
83-
<cve>CVE-2024-38816</cve>
84-
<cve>CVE-2024-38820</cve>
85-
</suppress>
8633
<!-- swagger-ui-5.17.14 (DOMPurify@3.1.4) -->
8734
<!-- org.springdoc:springdoc-openapi-starter-webmvc-ui@2.6.0 -->
8835
<suppress>
8936
<cve>CVE-2025-26791</cve>
9037
</suppress>
9138
<!-- tomcat-embed-core-10.1.25.jar -->
92-
<!-- org.springframework.boot:spring-boot-starter-web@3.3.1 -->
39+
<!-- org.springframework.boot:spring-boot-starter-web@3.3.8 -->
9340
<suppress>
9441
<cve>CVE-2024-50379</cve>
9542
<cve>CVE-2024-52316</cve>
@@ -107,8 +54,4 @@
10754
<cve>CVE-2025-55668</cve>
10855
<cve>CVE-2025-48989</cve>
10956
</suppress>
110-
<!-- spring-boot-starter-actuator -->
111-
<suppress>
112-
<cve>CVE-2025-22235</cve>
113-
</suppress>
11457
</suppressions>

‎pom.xml‎

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
<parent>
66
<groupId>org.springframework.boot</groupId>
77
<artifactId>spring-boot-starter-parent</artifactId>
8-
<version>3.3.1</version>
8+
<version>3.3.8</version>
99
<relativePath/> <!-- lookup parent from repository -->
1010
</parent>
1111
<groupId>com.onboarding.camera</groupId>
@@ -16,7 +16,7 @@
1616

1717
<properties>
1818
<java.version>21</java.version>
19-
<spring-cloud-azure.version>5.15.0</spring-cloud-azure.version>
19+
<spring-cloud-azure.version>5.18.0</spring-cloud-azure.version>
2020
</properties>
2121

2222
<dependencies>
@@ -50,6 +50,7 @@
5050
<dependency>
5151
<groupId>org.projectlombok</groupId>
5252
<artifactId>lombok</artifactId>
53+
<version>1.18.38</version>
5354
<optional>true</optional>
5455
</dependency>
5556

@@ -61,7 +62,6 @@
6162
<dependency>
6263
<groupId>com.azure</groupId>
6364
<artifactId>azure-storage-blob</artifactId>
64-
<version>12.27.1</version>
6565
</dependency>
6666

6767
<dependency>
@@ -188,8 +188,9 @@
188188
<plugin>
189189
<groupId>org.owasp</groupId>
190190
<artifactId>dependency-check-maven</artifactId>
191-
<version>12.1.0</version>
191+
<version>12.1.5</version>
192192
<configuration>
193+
<ossindexAnalyzerEnabled>false</ossindexAnalyzerEnabled>
193194
<suppressionFile>${project.basedir}/owasp-suppressions.xml</suppressionFile>
194195
<knownExploitedEnabled>false</knownExploitedEnabled>
195196
<failBuildOnCVSS>0</failBuildOnCVSS>

0 commit comments

Comments
 (0)