From ed2104138e4cc63984d22b9408667580841991ef Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 19 Aug 2025 04:08:36 +0000
Subject: [PATCH] fix: pom.xml to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-IONETTY-11799531
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCAT-11799151
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCATEMBED-11799152
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-11958848
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCAT-11798985
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCATEMBED-11798986
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-11777856
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-11789705
---
 pom.xml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/pom.xml b/pom.xml
index 779e4c489..ebb6d25de 100644
--- a/pom.xml
+++ b/pom.xml
@@ -7,7 +7,7 @@
 		<groupId>org.springframework.boot</groupId>
 		<artifactId>spring-boot-starter-parent</artifactId>
 		<version>2.3.5.RELEASE</version>
-		<relativePath /> <!-- lookup parent from repository -->
+		<relativePath/> <!-- lookup parent from repository -->
 	</parent>
 	<groupId>com.example</groupId>
 	<artifactId>demo</artifactId>
@@ -43,7 +43,7 @@
 		<dependency>
 			<groupId>io.quarkus</groupId>
 			<artifactId>quarkus-oidc</artifactId>
-			<version>2.13.7.Final</version>
+			<version>3.15.6.1</version>
 		</dependency>
 		<dependency> 
 			<groupId>org.keycloak</groupId>
@@ -75,22 +75,22 @@
 		<dependency>
 			<groupId>org.springframework</groupId>
 			<artifactId>spring-webmvc</artifactId>
-			<version>6.0.6</version>
+			<version>6.2.10</version>
 		</dependency>
 		<dependency>
 			<groupId>org.keycloak</groupId>
 			<artifactId>keycloak-core</artifactId>
-			<version>16.1.0</version>
+			<version>19.0.0</version>
 		</dependency>
 		<dependency>
 			<groupId>org.springframework</groupId>
 			<artifactId>spring-expression</artifactId>
-			<version>6.0.6</version>
+			<version>6.2.10</version>
 		</dependency>
 		<dependency>
 			<groupId>org.springframework.security</groupId>
 			<artifactId>spring-security-web</artifactId>
-			<version>5.7.3</version>
+			<version>6.4.9</version>
 		</dependency>
 		<dependency>
 			<groupId>com.mysql</groupId>
@@ -100,7 +100,7 @@
 		<dependency>
 			<groupId>io.vertx</groupId>
 			<artifactId>vertx-web</artifactId>
-			<version>4.3.7</version>
+			<version>4.5.18</version>
 		</dependency>
 		<dependency>
 			<groupId>commons-fileupload</groupId>
@@ -115,12 +115,12 @@
 		<dependency>
 			<groupId>org.apache.tomcat</groupId>
 			<artifactId>tomcat-catalina</artifactId>
-			<version>11.0.0-M10</version>
+			<version>11.0.10</version>
 		</dependency>
 		<dependency>
 			<groupId>org.apache.tomcat.embed</groupId>
 			<artifactId>tomcat-embed-core</artifactId>
-			<version>10.1.0</version>
+			<version>10.1.44</version>
 		</dependency>
 		<dependency>
 			<groupId>log4j</groupId>
@@ -175,12 +175,12 @@
 		<dependency>
 			<groupId>io.netty</groupId>
 			<artifactId>netty-codec-http2</artifactId>
-			<version>4.1.99.Final</version>
+			<version>4.1.124.Final</version>
 		</dependency>
 		<dependency>
 			<groupId>io.quarkus</groupId>
 			<artifactId>quarkus-keycloak-authorization</artifactId>
-			<version>2.13.7.Final</version>
+			<version>3.2.5.Final</version>
 		</dependency>
 		<dependency>
 			<groupId>io.quarkus</groupId>