From 444d2a3b49e803326c56bfaff7a461f13bd6ed4a Mon Sep 17 00:00:00 2001
From: Andrey Yegorov <8622884+dlg99@users.noreply.github.com>
Date: Wed, 19 Jan 2022 23:51:57 -0800
Subject: [PATCH] Getting rid of CVEs in batch-data-generator (#13820)

CVE-2021-41269
CVE-2021-22060
CVE-2021-22096
CVE-2021-22118

(cherry picked from commit 5a33d106dd282fa85008888a687c94203f888df7)
---
 pom.xml                                | 4 ++--
 pulsar-io/batch-data-generator/pom.xml | 6 ++++++
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 08b40dfd63b59..1075d571aa427 100644
--- a/pom.xml
+++ b/pom.xml
@@ -192,8 +192,8 @@ flexible messaging model and an intuitive client API.</description>
     <jna.version>4.2.0</jna.version>
     <kubernetesclient.version>12.0.1</kubernetesclient.version>
     <nsq-client.version>1.0</nsq-client.version>
-    <cron-utils.version>9.1.3</cron-utils.version>
-    <spring-context.version>5.3.1</spring-context.version>
+    <cron-utils.version>9.1.6</cron-utils.version>
+    <spring-context.version>5.3.15</spring-context.version>
     <apache-http-client.version>4.5.13</apache-http-client.version>
 
     <!-- test dependencies -->
diff --git a/pulsar-io/batch-data-generator/pom.xml b/pulsar-io/batch-data-generator/pom.xml
index cdc17060b70a5..fe0b72ec5f52f 100644
--- a/pulsar-io/batch-data-generator/pom.xml
+++ b/pulsar-io/batch-data-generator/pom.xml
@@ -44,6 +44,12 @@
             <version>${project.version}</version>
         </dependency>
 
+        <dependency>
+            <groupId>org.springframework</groupId>
+            <artifactId>spring-context</artifactId>
+            <version>${spring-context.version}</version>
+        </dependency>
+
         <dependency>
             <groupId>io.codearte.jfairy</groupId>
             <artifactId>jfairy</artifactId>