From c1325d75940dff7de8000493db7338419e25796e Mon Sep 17 00:00:00 2001
From: Avgustin Marinov <Avgustin.Marinov@bosch.com>
Date: Mon, 23 Oct 2023 12:24:30 +0300
Subject: [PATCH] Fix CVE-2022-31690 (#1459)

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
---
 pom.xml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index e51d18acb..60a6d6f28 100644
--- a/pom.xml
+++ b/pom.xml
@@ -17,7 +17,7 @@
    <parent>
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot-starter-parent</artifactId>
-      <version>2.7.15</version>
+      <version>2.7.17</version>
    </parent>
 
    <groupId>org.eclipse.hawkbit</groupId>
@@ -142,9 +142,11 @@
       <java.version>17</java.version>
       <test.jvm.args/>
 
-      <spring.boot.version>2.7.15</spring.boot.version>
+      <spring.boot.version>2.7.17</spring.boot.version>
       <spring.cloud.version>2021.0.5</spring.cloud.version>
       <spring.plugin.core.version>2.0.0.RELEASE</spring.plugin.core.version>
+      <!-- CVE-2022-31690 Remove after Spring 3.0.0 migration-->
+      <spring.security.oauth2.client.version>5.7.10</spring.security.oauth2.client.version>
 
       <!-- Swagger Support -->
       <springdoc-openapi.version>1.7.0</springdoc-openapi.version>