From be6106f7510aa56fa4806c7bceab31c9139020b1 Mon Sep 17 00:00:00 2001
From: Thomas Papke <web@thopap.de>
Date: Fri, 29 Mar 2024 20:28:15 +0100
Subject: [PATCH] Fix CVE's

---
 pom.xml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/pom.xml b/pom.xml
index b713b92..74fea5c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -18,9 +18,27 @@
         <java.version>17</java.version>
         <ipf.version>4.8.0</ipf.version>
         <mockserver.version>5.15.0</mockserver.version>
+        <!-- resolve vulnerabilities -->
+        <cxf.version>3.6.3</cxf.version>
+        <spring-framework.version>5.3.33</spring-framework.version>
+        <json-path.version>2.9.0</json-path.version>
     </properties>
     <dependencyManagement>
         <dependencies>
+            <dependency>
+                <groupId>org.apache.cxf</groupId>
+                <artifactId>cxf-bom</artifactId>
+                <version>${cxf.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+            <dependency>
+                <groupId>org.springframework</groupId>
+                <artifactId>spring-framework-bom</artifactId>
+                <version>${spring-framework.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
             <dependency>
                 <groupId>org.openehealth.ipf</groupId>
                 <artifactId>ipf-dependencies</artifactId>
@@ -28,6 +46,12 @@
                 <scope>import</scope>
                 <version>${ipf.version}</version>
             </dependency>
+            <dependency>
+                <groupId>com.jayway.jsonpath</groupId>
+                <artifactId>json-path</artifactId>
+                <version>${json-path.version}</version>
+            </dependency>
+
         </dependencies>
     </dependencyManagement>
     <dependencies>