From d193c5f0b9a9d26156d8e4262575457d7e30b61c Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 14 Jul 2025 09:20:37 +0000
Subject: [PATCH] fix: marlo-parent/pom.xml to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMMONSLANG-10734077
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-10734078
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-10500754
- https://snyk.io/vuln/SNYK-JAVA-COMMONSBEANUTILS-10259368
---
 marlo-parent/pom.xml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/marlo-parent/pom.xml b/marlo-parent/pom.xml
index 42c7869f70..edc9a1098a 100644
--- a/marlo-parent/pom.xml
+++ b/marlo-parent/pom.xml
@@ -20,7 +20,7 @@
 		<javax.inject.version>1</javax.inject.version>
 		<javax-mail.version>1.5.5</javax-mail.version>
 		<com.sun.mail.version>1.5.5</com.sun.mail.version>
-		<struts2.version>2.5.33</struts2.version>
+		<struts2.version>6.3.0</struts2.version>
 		<mysql.version>8.0.16</mysql.version>
 		<servlet-api.version>3.0.1</servlet-api.version>
 		<jsp-api.version>2.2.1</jsp-api.version>
@@ -34,7 +34,7 @@
 		<apache-shiro-version>1.7.1</apache-shiro-version>
 		<groovy-version>2.4.6</groovy-version>
 		<jasperreports-fonts-version>6.0.0</jasperreports-fonts-version>
-		<jasper-reports-version>6.2.2</jasper-reports-version>
+		<jasper-reports-version>6.21.0</jasper-reports-version>
 		<com.google.code.gson-version>2.6.2</com.google.code.gson-version>
 		<pusher-http-java>1.0.0</pusher-http-java>
 		<pentaho-report.version>6.1.0.1-196</pentaho-report.version>
@@ -53,17 +53,17 @@
 		<commons-discovery.version>0.4</commons-discovery.version>
 		<wsdl4j.version>1.6.2</wsdl4j.version>
 		<tomcat-catalina.version>8.0.53</tomcat-catalina.version>
-		<jackson.version>2.9.9</jackson.version>
-		<jackson.version.databind>2.9.10.7</jackson.version.databind>
+		<jackson.version>2.15.0</jackson.version>
+		<jackson.version.databind>2.15.0</jackson.version.databind>
 		<org.mapstruct.version>1.2.0.Final</org.mapstruct.version>
 		<slack.webhook.version>1.3.0</slack.webhook.version>
 		<hibernate-validator.version>5.2.2.Final</hibernate-validator.version>
 		<aspectj.version>1.8.10</aspectj.version>
 		<springfox-swagger2.version>2.9.2</springfox-swagger2.version>
 		<quartz.version>2.3.2</quartz.version>
-		<commons-validator>1.4.0</commons-validator>
+		<commons-validator>1.10.0</commons-validator>
 		<jsoup.version>1.11.3</jsoup.version>
-		<geoip2.version>2.12.0</geoip2.version>
+		<geoip2.version>2.17.0</geoip2.version>
 		<javax.inject.version>1</javax.inject.version>
 		<tomcat.version>8.0.53</tomcat.version>
 		<log4j.version>2.16.0</log4j.version>