Update pom.xml

[koraytugay]

No description provided.

[github-actions]

🧪 Nexus IQ • PR Risk Dashboard

Snapshot of dependency policy risk introduced by this PR.

  

Legend & Colors

Severity:
Badges: numbers show count of policy violations at that severity.

🧩 New Components

spring-data-jpa 2.0.12.RELEASE  •      —    

Severity	Policy	Constraint	Reason
	Security-Medium	Medium risk CVSS score	- Found security vulnerability CVE-2019-3797 with severity >= 4 (severity = 5.3) - Found security vulnerability CVE-2019-3797 with severity < 7 (severity = 5.3)
	Security-Medium	Medium risk CVSS score	- Found security vulnerability CVE-2019-3802 with severity >= 4 (severity = 5.3) - Found security vulnerability CVE-2019-3802 with severity < 7 (severity = 5.3)
	Architecture-Quality	Version is old	- Found component older than 5 years
	Architecture-Quality	Version is unpopular	- Relative popularity was <= 10% (relative popularity = 0%)

Transitive: spring-data-commons 2.0.12.RELEASE

Severity	Policy	Constraint	Reason
	Architecture-Quality	Version is old	- Found component older than 5 years
	Architecture-Quality	Version is unpopular	- Relative popularity was <= 10% (relative popularity = 0%)

Transitive: spring-orm 5.0.11.RELEASE

Severity	Policy	Constraint	Reason
	Architecture-Quality	Version is old	- Found component older than 5 years
	Architecture-Quality	Version is unpopular	- Relative popularity was <= 10% (relative popularity = 0%)

Transitive: spring-context 5.0.11.RELEASE

Severity	Policy	Constraint	Reason
	Security-Medium	Medium risk CVSS score	- Found security vulnerability CVE-2022-22968 with severity >= 4 (severity = 5.3) - Found security vulnerability CVE-2022-22968 with severity < 7 (severity = 5.3)
	Security-Low	Low risk CVSS score	- Found security vulnerability CVE-2025-22233 with severity >= 0 (severity = 2.3) - Found security vulnerability CVE-2025-22233 with severity < 4 (severity = 2.3)
	Architecture-Quality	Version is old	- Found component older than 5 years
	Architecture-Quality	Version is unpopular	- Relative popularity was <= 10% (relative popularity = 0%)

Transitive: spring-aop 5.0.11.RELEASE

Severity	Policy	Constraint	Reason
	Architecture-Quality	Version is old	- Found component older than 5 years
	Architecture-Quality	Version is unpopular	- Relative popularity was <= 10% (relative popularity = 0%)

Transitive: spring-tx 5.0.11.RELEASE

Severity	Policy	Constraint	Reason
	Architecture-Quality	Version is old	- Found component older than 5 years
	Architecture-Quality	Version is unpopular	- Relative popularity was <= 10% (relative popularity = 0%)

Transitive: spring-beans 5.0.11.RELEASE

Severity	Policy	Constraint	Reason
	Security-Critical	Critical risk CVSS score	- Found security vulnerability CVE-2022-22965 with severity >= 9 (severity = 9.8)
	Security-Critical	Critical risk CVSS score	- Found security vulnerability sonatype-2022-1764 with severity >= 9 (severity = 9.8)
	Architecture-Quality	Version is old	- Found component older than 5 years
	Architecture-Quality	Version is unpopular	- Relative popularity was <= 10% (relative popularity = 0%)

Transitive: spring-core 5.0.11.RELEASE

Severity	Policy	Constraint	Reason
	Security-High	High risk CVSS score	- Found security vulnerability CVE-2025-41242 with severity >= 7 (severity = 8.2) - Found security vulnerability CVE-2025-41242 with severity < 9 (severity = 8.2)
	Architecture-Quality	Version is old	- Found component older than 5 years
	Architecture-Quality	Version is unpopular	- Relative popularity was <= 10% (relative popularity = 0%)

Transitive: aspectjrt 1.8.13

Severity	Policy	Constraint	Reason
	Architecture-Quality	Version is old	- Found component older than 5 years
	Architecture-Quality	Version is unpopular	- Relative popularity was <= 10% (relative popularity = 7%)

Transitive: slf4j-api 1.7.25

Severity	Policy	Constraint	Reason
	Architecture-Quality	Version is old	- Found component older than 5 years

log4j-core 2.8.1  •    

Severity	Policy	Constraint	Reason
	Security-Critical	Critical risk CVSS score	- Found security vulnerability CVE-2017-5645 with severity >= 9 (severity = 9.8)
	Security-Critical	Critical risk CVSS score	- Found security vulnerability CVE-2021-44228 with severity >= 9 (severity = 10.0)
	Security-Critical	Critical risk CVSS score	- Found security vulnerability CVE-2021-45046 with severity >= 9 (severity = 9.0)
	Security-Critical	Critical risk CVSS score	- Found security vulnerability sonatype-2021-4560 with severity >= 9 (severity = 9.0)
	Security-Medium	Medium risk CVSS score	- Found security vulnerability CVE-2021-44832 with severity >= 4 (severity = 6.6) - Found security vulnerability CVE-2021-44832 with severity < 7 (severity = 6.6)
	Security-Medium	Medium risk CVSS score	- Found security vulnerability CVE-2021-45105 with severity >= 4 (severity = 5.9) - Found security vulnerability CVE-2021-45105 with severity < 7 (severity = 5.9)
	Security-Low	Low risk CVSS score	- Found security vulnerability CVE-2020-9488 with severity >= 0 (severity = 3.7) - Found security vulnerability CVE-2020-9488 with severity < 4 (severity = 3.7)
	Architecture-Quality	Version is old	- Found component older than 5 years
	Architecture-Quality	Version is unpopular	- Relative popularity was <= 10% (relative popularity = 1%)

Transitive: log4j-api 2.8.1

Severity	Policy	Constraint	Reason
	Architecture-Quality	Version is old	- Found component older than 5 years
	Architecture-Quality	Version is unpopular	- Relative popularity was <= 10% (relative popularity = 1%)

jaxb-impl 4.0.5  •    

This component does not have any vulnerabilities.

⬆️ Version Changes

jackson-core  `2.14.2`     →  `2.19.2`   

Before 2.14.2

Severity	Policy	Constraint	Reason
	Security-High	High risk CVSS score	- Found security vulnerability CVE-2025-52999 with severity >= 7 (severity = 8.7) - Found security vulnerability CVE-2025-52999 with severity < 9 (severity = 8.7)
	Security-High	High risk CVSS score	- Found security vulnerability sonatype-2022-6438 with severity >= 7 (severity = 7.5) - Found security vulnerability sonatype-2022-6438 with severity < 9 (severity = 7.5)

After 2.19.2

This component does not have any vulnerabilities.

➖ Removed Components

h2 2.2.220  •    

Severity	Policy	Constraint	Reason
	Security-Medium	Medium risk CVSS score	- Found security vulnerability sonatype-2018-0863 with severity >= 4 (severity = 6.0) - Found security vulnerability sonatype-2018-0863 with severity < 7 (severity = 6.0)
	Architecture-Quality	Version is unpopular	- Relative popularity was <= 10% (relative popularity = 5%)