Merge pull request #46 from Nosto/fix/update-libraries

Update libraries based on security reports
Nosto · Dec 28, 2021 · 170a4de · 170a4de
2 parents 719e757 + 599e4fd
commit 170a4de
Show file tree

Hide file tree

Showing 7 changed files with 3 additions and 3 deletions.
diff --git a/framework/dependencies.yml b/framework/dependencies.yml
@@ -8,7 +8,7 @@ transitiveDependencies: false
 # This core dependencies are required by Play framework
 require:    &allDependencies
     - antlr 2.7.7
-    - com.mchange -> c3p0 0.9.5.2
+    - com.mchange -> c3p0 0.9.5.5
     - com.zaxxer -> HikariCP 3.2.0
     - org.ow2.asm -> asm 7.0
     - org.ow2.asm -> asm-commons 7.0
@@ -22,7 +22,7 @@ require:    &allDependencies
     - commons-beanutils 1.9.2
     - commons-codec 1.10
     - org.apache.commons -> commons-email 1.4
-    - commons-fileupload 1.3.2
+    - commons-fileupload 1.4
     - commons-io 2.5
     - com.google.code.maven-play-plugin.org.apache.commons -> commons-javaflow 1590792
     - commons-lang 2.6
@@ -70,7 +70,7 @@ require:    &allDependencies
     - org.postgresql -> postgresql 42.2.4
     - org.yaml -> snakeyaml 1.17
     - net.spy -> spymemcached 2.12.1
-    - com.thoughtworks.xstream -> xstream 1.4.9
+    - com.thoughtworks.xstream -> xstream 1.4.18
     - xmlpull 1.1.3.4d_b4_min
     - org.apache.logging.log4j -> log4j-core 2.17.0
     - org.apache.logging.log4j -> log4j-api 2.17.0

diff --git a/framework/lib/c3p0-0.9.5.2.jar b/framework/lib/c3p0-0.9.5.2.jar
diff --git a/framework/lib/c3p0-0.9.5.5.jar b/framework/lib/c3p0-0.9.5.5.jar
diff --git a/framework/lib/commons-fileupload-1.3.2.jar b/framework/lib/commons-fileupload-1.3.2.jar
diff --git a/framework/lib/commons-fileupload-1.4.jar b/framework/lib/commons-fileupload-1.4.jar
diff --git a/framework/lib/xstream-1.4.18.jar b/framework/lib/xstream-1.4.18.jar
diff --git a/framework/lib/xstream-1.4.9.jar b/framework/lib/xstream-1.4.9.jar