Fix CVE

[LOW] com.google.guava:[email protected]: SNYK-JAVA-COMGOOGLEGUAVA-1015415 CWE-200 [Fixed in: 30.0-android, 30.0-jre]. [LOW] com.google.guava:[email protected]: SNYK-JAVA-COMGOOGLEGUAVA-5710356 CWE-379 [Fixed in: 32.0.0-android, 32.0.0-jre]. [LOW] com.google.guava:[email protected]: SNYK-JAVA-COMGOOGLEGUAVA-5710356 CWE-379 [Fixed in: 32.0.0-android, 32.0.0-jre]. [HIGH] org.geotools:[email protected]: SNYK-JAVA-ORGGEOTOOLS-3329308 CWE-89 [Fixed in: 27.5, 28.3]. [MEDIUM] org.springframework:[email protected]: SNYK-JAVA-ORGSPRINGFRAMEWORK-7687446 CWE-770 [Fixed in: 5.3.39]. [MEDIUM] org.springframework:[email protected]: SNYK-JAVA-ORGSPRINGFRAMEWORK-7687447 CWE-400 [Fixed in: 5.3.38, 6.0.23, 6.1.12]. [MEDIUM] org.testng:[email protected]: SNYK-JAVA-ORGTESTNG-3040285 CWE-29 [Fixed in: 7.5.1, 7.7.0].
mapfish · Aug 30, 2024 · 1a1f29d · 1a1f29d
1 parent 03b1cd1
commit 1a1f29d
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/core/build.gradle b/core/build.gradle
@@ -113,13 +113,13 @@ configurations {
 }
 
 ext {
-    springVersion = '5.3.37'
+    springVersion = '5.3.39'
 }
 
 dependencies {
     def slf4jVersion = '1.7.36'
     def metricsVersion = '4.2.26'
-    def geotoolsVersion = '24.7'
+    def geotoolsVersion = '27.5'
     def logbackVersion = '1.4.14'
 
     compile(
@@ -141,7 +141,8 @@ dependencies {
             // Indirect dependencies
             'org.apache.commons:commons-text:1.10.0',
             'org.hsqldb:hsqldb:2.7.3',
-            'com.fasterxml.jackson.core:jackson-databind:2.13.5'
+            'com.fasterxml.jackson.core:jackson-databind:2.13.5',
+            'org.testng:testng:7.5.1',
     )
     metrics(
             "io.dropwizard.metrics:metrics-core:$metricsVersion",
@@ -172,7 +173,7 @@ dependencies {
     )
     compile fileTree(dir: "$projectDir/libs", include: '*.jar')
     compile(
-            'com.google.guava:guava:30.1.1-jre',
+            'com.google.guava:guava:32.0.0-jre',
             "org.slf4j:slf4j-api:${slf4jVersion}",
             "org.slf4j:jcl-over-slf4j:${slf4jVersion}",
             "org.slf4j:jul-to-slf4j:${slf4jVersion}",