Getting rid of CVEs in batch-data-generator (#13820)

CVE-2021-41269 CVE-2021-22060 CVE-2021-22096 CVE-2021-22118 (cherry picked from commit 5a33d10)
apache · Jan 27, 2022 · 444d2a3 · 444d2a3
1 parent a669b25
commit 444d2a3
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -192,8 +192,8 @@ flexible messaging model and an intuitive client API.</description>
     <jna.version>4.2.0</jna.version>
     <kubernetesclient.version>12.0.1</kubernetesclient.version>
     <nsq-client.version>1.0</nsq-client.version>
-    <cron-utils.version>9.1.3</cron-utils.version>
-    <spring-context.version>5.3.1</spring-context.version>
+    <cron-utils.version>9.1.6</cron-utils.version>
+    <spring-context.version>5.3.15</spring-context.version>
     <apache-http-client.version>4.5.13</apache-http-client.version>
 
     <!-- test dependencies -->

diff --git a/pulsar-io/batch-data-generator/pom.xml b/pulsar-io/batch-data-generator/pom.xml
@@ -44,6 +44,12 @@
             <version>${project.version}</version>
         </dependency>
 
+        <dependency>
+            <groupId>org.springframework</groupId>
+            <artifactId>spring-context</artifactId>
+            <version>${spring-context.version}</version>
+        </dependency>
+
         <dependency>
             <groupId>io.codearte.jfairy</groupId>
             <artifactId>jfairy</artifactId>