thingsboard/3.8.1-r0: cve remediation (#32597)

thingsboard/3.8.1-r0: fix GHSA-c4q5-6c82-3qpw/GHSA-4gc7-5j7h-4qph/ Advisory data: https://github.com/wolfi-dev/advisories/blob/main/thingsboard.advisories.yaml Signed-off-by: Mark McCormick <[email protected]> Co-authored-by: octo-sts[bot] <[email protected]> Co-authored-by: Mark McCormick <[email protected]>
wolfi-dev · Nov 20, 2024 · dc24931 · dc24931
1 parent a08fd08
commit dc24931
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/thingsboard/pombump-deps.yaml b/thingsboard/pombump-deps.yaml
@@ -14,15 +14,18 @@ patches:
     - groupId: com.squareup.wire
       artifactId: wire-schema-jvm
       version: 4.9.9
-    - groupID: com.google.protobuf
-      artifactID: protobuf-java
+    - groupId: ""
+      artifactId: ""
       version: 3.25.5
     - groupId: org.springframework
       artifactId: spring-web
       version: 6.1.12
     - groupId: org.springframework
       artifactId: spring-context
       version: 6.1.14
+    - groupId: org.springframework.security
+      artifactId: spring-security-web
+      version: 6.2.7
     - groupId: io.netty
       artifactId: netty-common
       version: 4.1.115.Final