Prepared for BeanMapper(-Spring) update

42BV · Nov 9, 2022 · 8746715 · 8746715
1 parent 2e29e36
commit 8746715
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/owasp-suppressions.xml b/owasp-suppressions.xml
@@ -17,4 +17,12 @@
         <cve>CVE-2022-38749</cve>
         <cve>CVE-2022-25857</cve>
     </suppress>
+    <suppress>
+        <notes>Fails due to spring-boot-starter-security, spring-boot-starter-web, waiting for fix from spring</notes>
+        <cve>CVE-2022-31690</cve>
+        <cve>CVE-2022-31692</cve>
+        <cve>CVE-2022-42252</cve>
+        <cve>CVE-2022-42003</cve>
+        <cve>CVE-2022-42004</cve>
+    </suppress>
 </suppressions>
diff --git a/pom.xml b/pom.xml
@@ -61,7 +61,7 @@
 
         <spring.boot.version>2.7.3</spring.boot.version>
         <beanmapper.version>4.1.0</beanmapper.version>
-        <beanmapper.spring.version>4.1.0</beanmapper.spring.version>
+        <beanmapper.spring.version>4.1.1</beanmapper.spring.version>
         <maven.release.plugin.version>2.5.3</maven.release.plugin.version>
         <maven.scm.provider.gitexe.version>1.13.0</maven.scm.provider.gitexe.version>
     </properties>
@@ -84,11 +84,13 @@
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-web</artifactId>
+            <version>2.7.5</version>
             <optional>true</optional>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-security</artifactId>
+            <version>2.7.5</version>
             <optional>true</optional>
         </dependency>
         <dependency>