From 55e541c951fc9d2372d2cf4e8816a9812b231713 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 27 Jan 2026 08:16:33 +0000
Subject: [PATCH] fix: pom.xml to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-IOUNDERTOW-15053841
- https://snyk.io/vuln/SNYK-JAVA-IOVERTX-14988768
- https://snyk.io/vuln/SNYK-JAVA-IOUNDERTOW-14908846
- https://snyk.io/vuln/SNYK-JAVA-CHQOSLOGBACK-15062482
---
 pom.xml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/pom.xml b/pom.xml
index 779e4c48..2884cb01 100644
--- a/pom.xml
+++ b/pom.xml
@@ -7,7 +7,7 @@
 		<groupId>org.springframework.boot</groupId>
 		<artifactId>spring-boot-starter-parent</artifactId>
 		<version>2.3.5.RELEASE</version>
-		<relativePath /> <!-- lookup parent from repository -->
+		<relativePath/> <!-- lookup parent from repository -->
 	</parent>
 	<groupId>com.example</groupId>
 	<artifactId>demo</artifactId>
@@ -43,7 +43,7 @@
 		<dependency>
 			<groupId>io.quarkus</groupId>
 			<artifactId>quarkus-oidc</artifactId>
-			<version>2.13.7.Final</version>
+			<version>3.30.7</version>
 		</dependency>
 		<dependency> 
 			<groupId>org.keycloak</groupId>
@@ -53,7 +53,7 @@
 		<dependency> 
 			<groupId>ch.qos.logback</groupId>
 			<artifactId>logback-core</artifactId>
-			<version>1.1.10</version>
+			<version>1.5.25</version>
 		</dependency>
 		<dependency>
 			<groupId>org.apache.james</groupId>
@@ -141,7 +141,7 @@
 		<dependency>
 			<groupId>io.quarkus</groupId>
 			<artifactId>quarkus-grpc</artifactId>
-			<version>3.2.0.Final</version>
+			<version>3.30.7</version>
 		</dependency>
 	
 		<dependency>
@@ -152,7 +152,7 @@
 		<dependency>
 			<groupId>io.undertow</groupId>
 			<artifactId>undertow-servlet</artifactId>
-			<version>2.3.6.Final</version>
+			<version>2.3.21.Final</version>
 		</dependency>
 
 		<dependency>
@@ -190,7 +190,7 @@
 		<dependency>
 			<groupId>io.quarkus</groupId>
 			<artifactId>quarkus-vertx-http</artifactId>
-			<version>2.13.8.Final-redhat-00006</version>
+			<version>3.30.7</version>
 		</dependency>
 	</dependencies>
 </project>
\ No newline at end of file