From fded0c30e025b7dd1ff37739302681f98531f342 Mon Sep 17 00:00:00 2001
From: pwgit-create <peter.westin@pwss.dev>
Date: Sun, 24 May 2026 00:35:04 +0200
Subject: [PATCH] =?UTF-8?q?Fix=20security=20vulnerabilities=20reported=20b?=
 =?UTF-8?q?y=20Snyk=20in=20Tomcat=20(11.0.21=20=E2=86=92=2011.0.22)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 File-Integrity-Scanner/pom.xml | 45 +++++++++++++++++++++++++---------
 1 file changed, 33 insertions(+), 12 deletions(-)

diff --git a/File-Integrity-Scanner/pom.xml b/File-Integrity-Scanner/pom.xml
index ca40466..fa0c98e 100644
--- a/File-Integrity-Scanner/pom.xml
+++ b/File-Integrity-Scanner/pom.xml
@@ -44,6 +44,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <spring-boot.version>4.0.6</spring-boot.version>
         <postgresql.JDBC-Driver.version>42.7.11</postgresql.JDBC-Driver.version>
+        <tomcat.version>11.0.22</tomcat.version>
     </properties>
 
 
@@ -170,20 +171,40 @@
 
     </dependencies>
 
-    <dependencyManagement>
-    <dependencies>
-        <!-- Make sure all Spring Boot components are using the same version -->
-        <dependency>
-            <groupId>org.springframework.boot</groupId>
-            <artifactId>spring-boot-dependencies</artifactId>
-            <version>${spring-boot.version}</version>
-            <type>pom</type>
-            <scope>import</scope>
-        </dependency>
-    </dependencies>
+<dependencyManagement>
+  <dependencies>
+
+    <!-- Spring Boot BOM -->
+    <dependency>
+      <groupId>org.springframework.boot</groupId>
+      <artifactId>spring-boot-dependencies</artifactId>
+      <version>${spring-boot.version}</version>
+      <type>pom</type>
+      <scope>import</scope>
+    </dependency>
+
+    <!-- Force patched Tomcat (fixes Snyk CVEs) -->
+    <dependency>
+      <groupId>org.apache.tomcat.embed</groupId>
+      <artifactId>tomcat-embed-core</artifactId>
+      <version>11.0.22</version>
+    </dependency>
+
+    <dependency>
+      <groupId>org.apache.tomcat.embed</groupId>
+      <artifactId>tomcat-embed-websocket</artifactId>
+      <version>11.0.22</version>
+    </dependency>
+
+    <dependency>
+      <groupId>org.apache.tomcat.embed</groupId>
+      <artifactId>tomcat-embed-el</artifactId>
+      <version>11.0.22</version>
+    </dependency>
+
+  </dependencies>
 </dependencyManagement>
 
-
     <build>
         <plugins>
             <!--