Merge pull request #579 from usc-isi-i2/security-alerts-april

Security alerts april

Author: punith300i

karma-app/build

@@ -48,7 +48,7 @@ unzip master.zip
 mv karma-app-deps-master/*.tar.gz .
 rm -rf karma-app-deps-master master.zip
 # download tomcat binary
-wget https://dlcdn.apache.org/tomcat/tomcat-8/v8.5.84/bin/apache-tomcat-8.5.84.zip
+wget https://dlcdn.apache.org/tomcat/tomcat-8/v8.5.88/bin/apache-tomcat-8.5.88.zip
 unzip apache-tomcat-*.zip
 rm apache-tomcat-*.zip
 mv apache-tomcat* tomcat

karma-app/desktop/app/package.json

@@ -9,7 +9,7 @@
   "main": "background.js",
   "dependencies": {
     "fs-jetpack": "^0.9.0",
-    "open": "latest",
+    "open": "7.0.2",
     "tail": "latest",
     "dialog-polyfill": "latest"
   }

karma-app/desktop/package.json

@@ -19,6 +19,7 @@
       "background": "resources/osx/dmg-background.png"
     }
   },
+
   "directories": {
     "buildResources": "resources"
   },
@@ -43,7 +44,7 @@
     "mocha": "^3.0.2",
     "rollup": "^0.34.7",
     "source-map-support": "^0.4.2",
-    "spectron": "^3.3.0",
+    "spectron": "^13.0.0",
     "yargs": "^4.2.0",
     "electron-packager": "latest"
   }

karma-common/pom.xml

@@ -103,6 +103,7 @@
 	<dependency>
 		<groupId>commons-fileupload</groupId>
 		<artifactId>commons-fileupload</artifactId>
+		<version>1.5</version>
 	</dependency>
 
 	<dependency>

karma-jsonld/pom.xml

@@ -19,7 +19,7 @@
         <dependency>
             <groupId>org.json</groupId>
             <artifactId>json</artifactId>
-            <version>20141113</version>
+            <version>20230227</version>
         </dependency>
         <dependency>
             <groupId>org.apache.commons</groupId>
@@ -49,7 +49,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.13.4.1</version>
+            <version>2.13.4.2</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
@@ -88,7 +88,7 @@
         <dependency>
             <groupId>org.apache.httpcomponents</groupId>
             <artifactId>httpclient-osgi</artifactId>
-            <version>4.5.2</version>
+            <version>4.5.13</version>
             <exclusions>
                 <exclusion>
                     <artifactId>commons-logging</artifactId>

karma-offline/pom.xml

@@ -56,7 +56,7 @@
 		<dependency>
 			<groupId>org.apache.tika</groupId>
 			<artifactId>tika-parsers</artifactId>
-			<version>1.5</version>
+			<version>1.18</version>
 		</dependency>
 		<dependency>
 			<groupId>jaxen</groupId>

pom.xml

@@ -74,7 +74,7 @@
 	  <gson.version>2.8.9</gson.version>
 	  <httpcomponents.version>4.5.13</httpcomponents.version>
 	  <guava.version>29.0-jre</guava.version>
-	  <spring.version>5.3.20</spring.version>
+	  <spring.version>5.3.27</spring.version>
 
   </properties>
 
@@ -235,12 +235,12 @@
     <dependency>
     	<groupId>org.json</groupId>
     	<artifactId>json</artifactId>
-    	<version>20131018</version>
+    	<version>20230227</version>
     </dependency>
     <dependency>
     	<groupId>commons-fileupload</groupId>
     	<artifactId>commons-fileupload</artifactId>
-    	<version>1.4</version>
+    	<version>1.5</version>
     </dependency>
     <dependency>
     	<groupId>commons-io</groupId>