diff --git a/allow-list.xml b/allow-list.xml
index 7aad8dc9f..1769b82d3 100644
--- a/allow-list.xml
+++ b/allow-list.xml
@@ -57,8 +57,9 @@
- org.json:json:20230227
+ org.json:json:20231013
CVE-2022-45688
+ CVE-2023-5072
net.minidev:json-smart:2.4.8
CVE-2023-1370
+
+
+ io.netty:netty-bom:4.1.101.Final
+ CVE-2023-4586
+
diff --git a/symphony-bdk-bom/build.gradle b/symphony-bdk-bom/build.gradle
index a32725dcb..b17639f3c 100644
--- a/symphony-bdk-bom/build.gradle
+++ b/symphony-bdk-bom/build.gradle
@@ -16,9 +16,9 @@ repositories {
dependencies {
// import Spring Boot's BOM
- api platform('org.springframework.boot:spring-boot-dependencies:3.0.7')
+ api platform('org.springframework.boot:spring-boot-dependencies:3.0.13')
// import Jackson's BOM
- api platform('com.fasterxml.jackson:jackson-bom:2.15.0')
+ api platform('com.fasterxml.jackson:jackson-bom:2.15.3')
// import Jersey's BOM
api platform('org.glassfish.jersey:jersey-bom:3.1.2')
// import Log4j's BOM
@@ -64,7 +64,7 @@ dependencies {
api 'org.bouncycastle:bcpkix-jdk18on:1.74'
api 'com.google.code.findbugs:jsr305:3.0.2'
- api 'io.github.resilience4j:resilience4j-retry:1.7.1'
+ api 'io.github.resilience4j:resilience4j-retry:2.1.0'
api 'io.swagger:swagger-annotations:1.6.0'
api 'org.openapitools:jackson-databind-nullable:0.2.2'
@@ -79,7 +79,7 @@ dependencies {
api 'org.junit.jupiter:junit-jupiter-api:5.9.2'
api 'org.junit.jupiter:junit-jupiter-engine:5.9.2'
api 'com.tngtech.archunit:archunit-junit5:0.22.0'
- api 'org.mock-server:mockserver-netty:5.14.0'
+ api 'org.mock-server:mockserver-netty:5.15.0'
api 'org.mockito:mockito-core:4.11.0'
api 'org.mockito:mockito-junit-jupiter:4.11.0'
api 'org.assertj:assertj-core:3.24.2'
diff --git a/symphony-bdk-examples/bdk-multi-instances-example/build.gradle b/symphony-bdk-examples/bdk-multi-instances-example/build.gradle
index 190315608..5111cbf51 100644
--- a/symphony-bdk-examples/bdk-multi-instances-example/build.gradle
+++ b/symphony-bdk-examples/bdk-multi-instances-example/build.gradle
@@ -11,7 +11,7 @@ dependencies {
implementation project(':symphony-bdk-core')
implementation 'org.slf4j:slf4j-api'
- implementation 'com.hazelcast:hazelcast:5.3.0'
+ implementation 'com.hazelcast:hazelcast:5.3.6'
runtimeOnly 'ch.qos.logback:logback-classic'
}