dep: Update insecure dependencies

Nike-Inc · Jan 8, 2021 · 1f3f3b8 · 1f3f3b8
1 parent bab94ad
commit 1f3f3b8
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 10 deletions.
diff --git a/build.gradle b/build.gradle
@@ -24,11 +24,11 @@ buildscript {
       resilience4j: '1.1.0',
       awsSdkVersion: '1.11.847',
       kork: '6.22.1',
-      guava: '28.1-jre',
+      guava: '30.1-jre',
       springBoot: springBootVersion,
     ]
   }
-  ext['groovy.version'] = '2.5.12'
+  ext['groovy.version'] = '2.5.14'
 
   repositories {
     maven {
@@ -131,8 +131,8 @@ subprojects {
     }
     dependencies {
       //upgrading tomcat manually until Spring-Boot 2.3.5 is released to resolve a security vulnerability
-      dependency 'org.apache.tomcat.embed:tomcat-embed-core:9.0.39'
-      dependency 'org.apache.tomcat.embed:tomcat-embed-websocket:9.0.39'
+      dependency 'org.apache.tomcat.embed:tomcat-embed-core:9.0.41'
+      dependency 'org.apache.tomcat.embed:tomcat-embed-websocket:9.0.41'
     }
   }
 

diff --git a/cerberus-dashboard/package-lock.json b/cerberus-dashboard/package-lock.json
diff --git a/cerberus-dashboard/package.json b/cerberus-dashboard/package.json
@@ -18,7 +18,7 @@
   "author": "Justin Field <[email protected]>",
   "license": "Apache-2.0",
   "dependencies": {
-    "axios": "^0.19.2",
+    "axios": "^0.21.1",
     "cookie": "0.3.1",
     "downloadjs": "1.4.7",
     "humps": "1.1.0",