Skip to content

security: Fix critical CVEs and update security dependencies #2711

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
simonredfern merged 3 commits into from
Feb 26, 2026
+25 −112
Merged

security: Fix critical CVEs and update security dependencies #2711

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
14d38b1
bind http4s to port 8080
tawoe Feb 26, 2026
1c860a8
security: Fix critical CVEs and update security dependencies
hongwei1 Feb 26, 2026
14bbf14
Merge remote-tracking branch 'Tobias/http4s' into obp-develop
hongwei1 Feb 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
117 changes: 17 additions & 100 deletions obp-api/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,34 +14,12 @@
<packaging>jar</packaging>
<name>Open Bank Project API</name>

<pluginRepositories>
<pluginRepository>
<id>org.sonatype.oss.groups.public</id>
<name>Sonatype Public</name>
<url>https://oss.sonatype.org/content/groups/public</url>
</pluginRepository>
</pluginRepositories>

<dependencies>
<dependency>
<groupId>com.tesobe</groupId>
<artifactId>obp-commons</artifactId>
</dependency>
<!--embed akka adapter start - COMMENTED OUT FOR PEKKO MIGRATION-->
<!-- TODO: Find or create Pekko equivalent for adapter-akka-commons
<dependency>
<groupId>com.github.OpenBankProject.OBP-Adapter-Akka-SpringBoot</groupId>
<artifactId>adapter-akka-commons</artifactId>
<version>v1.1.0</version>
<exclusions>
<exclusion>
<groupId>*</groupId>
<artifactId>*</artifactId>
</exclusion>
</exclusions>
</dependency>
-->
<!--embed akka adapter end-->

<dependency>
<groupId>com.github.everit-org.json-schema</groupId>
<artifactId>org.everit.json.schema</artifactId>
Expand All @@ -64,17 +42,17 @@
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>log4j-over-slf4j</artifactId>
<version>1.7.26</version>
<version>2.0.16</version>
</dependency>
<dependency>
<artifactId>slf4j-ext</artifactId>
<groupId>org.slf4j</groupId>
<version>1.7.26</version>
<version>2.0.16</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcpg-jdk15on</artifactId>
<version>1.70</version>
<artifactId>bcpg-jdk18on</artifactId>
<version>1.78.1</version>
</dependency>
<dependency>
<groupId>org.http4s</groupId>
Expand All @@ -88,8 +66,8 @@
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcpkix-jdk15on</artifactId>
<version>1.70</version>
<artifactId>bcpkix-jdk18on</artifactId>
<version>1.78.1</version>
</dependency>
<!-- https://mvnrepository.com/artifact/org.apache.commons/commons-lang3 -->
<dependency>
Expand Down Expand Up @@ -120,18 +98,14 @@
<version>2.2.220</version>
<scope>runtime</scope>
</dependency>
<!-- https://mvnrepository.com/artifact/mysql/mysql-connector-java -->
<!-- https://mvnrepository.com/artifact/com.mysql/mysql-connector-j -->
<!-- Updated from mysql:mysql-connector-java (deprecated) to com.mysql:mysql-connector-j -->
<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
<version>8.0.30</version>
<groupId>com.mysql</groupId>
<artifactId>mysql-connector-j</artifactId>
<version>8.0.33</version>
</dependency>
<!-- <dependency>
<groupId>com.microsoft.sqlserver</groupId>
<artifactId>mssql-jdbc</artifactId>
<version>6.2.0.jre8</version>
<scope>test</scope>
</dependency>-->

<dependency>
<groupId>junit</groupId>
<artifactId>junit</artifactId>
Expand All @@ -151,7 +125,7 @@
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpclient</artifactId>
<version>4.5.13</version>
<version>4.5.14</version>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
Expand All @@ -164,17 +138,7 @@
<artifactId>amqp_3.1_${scala.version}</artifactId>
<version>1.5.0</version>
</dependency>
<!-- <dependency>-->
<!-- <groupId>com.tokbox</groupId>-->
<!-- <artifactId>opentok-server-sdk</artifactId>-->
<!-- <version>3.0.0-beta.2</version>-->
<!-- <exclusions>-->
<!-- <exclusion>-->
<!-- <groupId>com.fasterxml.jackson.core</groupId>-->
<!-- <artifactId>jackson-databind</artifactId>-->
<!-- </exclusion>-->
<!-- </exclusions>-->
<!-- </dependency>-->

<dependency>
<groupId>org.elasticsearch</groupId>
<artifactId>elasticsearch</artifactId>
Expand Down Expand Up @@ -440,13 +404,7 @@
<version>3.2.7-RELEASE</version>
</dependency>

<!-- util convert Future to js Promise
<dependency>
<groupId>org.scala-js</groupId>
<artifactId>scalajs-library_${scala.version}</artifactId>
<version>1.9.0</version>
</dependency>
-->

<dependency>
<groupId>org.graalvm.js</groupId>
<artifactId>js</artifactId>
Expand Down Expand Up @@ -650,7 +608,6 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-resources-plugin</artifactId>
<version>3.0.1</version>
<executions>
<execution>
<id>default-copy-resources</id>
Expand Down Expand Up @@ -737,47 +694,7 @@
</execution>
</executions>
</plugin>
<!--soap related plugin begin-->
<!-- <plugin>-->
<!-- <groupId>org.scalaxb</groupId>-->
<!-- <artifactId>scalaxb-maven-plugin</artifactId>-->
<!-- <version>1.7.5</version>-->
<!-- <configuration>-->
<!-- <packageName>code.adapter.soap</packageName>-->
<!-- <wsdlDirectory>src/main/resources/custom_webapp/wsdl</wsdlDirectory>-->
<!-- <xsdDirectory>src/main/resources/custom_webapp/xsd</xsdDirectory>-->
<!-- </configuration>-->
<!-- <executions>-->
<!-- <execution>-->
<!-- <id>scalaxb</id>-->
<!-- <goals>-->
<!-- <goal>generate</goal>-->
<!-- </goals>-->
<!-- </execution>-->
<!-- </executions>-->
<!-- </plugin>-->
<!--grpc related plugin begin-->
<!-- currently not need, enable this plugin when need generate new grpc code.
<plugin>
<groupId>net.catte</groupId>
<artifactId>scalapb-maven-plugin</artifactId>
<version>1.2</version>
<configuration>
<javaOutput>false</javaOutput>
<inputDirectory>${basedir}/src/main/protobuf</inputDirectory>
<outputDirectory>${basedir}/src/main/scala</outputDirectory>
<grpc>true</grpc>
</configuration>
<executions>
<execution>
<goals>
<goal>compile</goal>
</goals>
<phase>generate-sources</phase>
</execution>
</executions>
</plugin>-->
<!--grpc related plugin end-->

</plugins>
</build>
<reporting>
Expand Down
10 changes: 0 additions & 10 deletions obp-commons/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,14 +13,6 @@
<packaging>jar</packaging>
<name>Open Bank Project Commons</name>

<repositories>
<repository>
<id>artima</id>
<name>Artima Maven Repository</name>
<url>http://repo.artima.com/releases</url>
</repository>
</repositories>

<dependencies>
<dependency>
<groupId>net.liftweb</groupId>
Expand Down Expand Up @@ -83,7 +75,6 @@
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>32.0.0-jre</version>
</dependency>
</dependencies>

Expand Down Expand Up @@ -170,7 +161,6 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-resources-plugin</artifactId>
<version>3.0.1</version>
<executions>
<execution>
<id>default-copy-resources</id>
Expand Down
10 changes: 8 additions & 2 deletions pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -101,6 +101,12 @@
<artifactId>commons-text</artifactId>
<version>1.12.0</version>
</dependency>
<!-- https://mvnrepository.com/artifact/com.google.guava/guava -->
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>32.0.0-jre</version>
</dependency>
<dependency>
<groupId>org.scalatest</groupId>
<artifactId>scalatest_${scala.version}</artifactId>
Expand Down Expand Up @@ -186,7 +192,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-resources-plugin</artifactId>
<version>3.0.1</version>
<version>3.3.1</version>
<executions>
<execution>
<id>default-copy-resources</id>
Expand Down Expand Up @@ -236,7 +242,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-site-plugin</artifactId>
<version>3.7.1</version>
<version>4.0.0-M13</version>
</plugin>

</plugins>
Expand Down
Loading