오픈소스 취약점 조치

build.gradle

@@ -113,9 +113,9 @@ dependencies {
     // https://mvnrepository.com/artifact/javax.servlet/javax.servlet-api
     compileOnly group: 'javax.servlet', name: 'javax.servlet-api', version: '4.0.1'
     
-    implementation group: 'com.fasterxml.jackson.core', name: 'jackson-databind', version: '2.13.1'
+    implementation group: 'com.fasterxml.jackson.core', name: 'jackson-databind', version: '2.13.2.2'
     //implementation group: 'com.fasterxml.jackson.dataformat', name: 'jackson-dataformat-xml', version: '2.13.1'
-	implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.13.1'
+	implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.13.2'
 
     // apistatus-draft.yml (자동 탐지 초안 양식) 로딩용.
     // admin 은 Spring Boot 가 아니라 yml 자동 바인딩이 없어 직접 파싱한다.
@@ -140,13 +140,18 @@ dependencies {
 
     implementation "org.apache.ibatis:ibatis-sqlmap:2.3.4.726"
     implementation "org.jdom:jdom:1.1"
-    implementation "com.google.code.gson:gson:2.3.1"
+    implementation "com.google.code.gson:gson:2.8.9"
     implementation "javax.annotation:javax.annotation-api:1.2"
     implementation "net.sf.json-lib:json-lib-ext-spring:1.0.2"
     implementation "taglibs:standard:1.1.2"
     implementation "javax.servlet:jstl:1.1.2"
     implementation group: 'com.jcraft', name: 'jsch', version: '0.1.51'
 
+    // springapp-servlet.xml 의 CommonsMultipartResolver 가 사용.
+    // 기존엔 elink-online-common(api 'commons-fileupload:1.5')에서 전이적으로 받아왔으나,
+    // eapim-online 쪽에서 해당 의존성을 제거할 예정이라 직접 선언으로 전환.
+    implementation "commons-fileupload:commons-fileupload:1.6.0"
+
     implementation "org.quartz-scheduler:quartz:${quartzVersion}"
 
     // https://mvnrepository.com/artifact/org.apache.poi/poi