From 21ba9bf355a4c79e2c2f897f771d03ced2fdedd2 Mon Sep 17 00:00:00 2001
From: Krasimir Kargov <krasikargov0703@gmail.com>
Date: Tue, 7 Apr 2026 09:26:29 +0300
Subject: [PATCH] Fixing vulnerable dependencies

---
 pom.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pom.xml b/pom.xml
index f811d13d50..16e0cf5676 100644
--- a/pom.xml
+++ b/pom.xml
@@ -64,6 +64,7 @@
         <azure-storage-blob.version>12.33.3</azure-storage-blob.version>
         <azure-core-http-okhttp.version>1.13.3</azure-core-http-okhttp.version>
         <javax.servlet-api.version>4.0.1</javax.servlet-api.version>
+        <wire-runtime.version>6.2.0</wire-runtime.version>
     </properties>
     <modules>
         <module>multiapps-controller-client</module>
@@ -814,6 +815,13 @@
                 <artifactId>resilience4j-ratelimiter</artifactId>
                 <version>${resilience4j.version}</version>
             </dependency>
+            <!-- Transitive dependency from org.cloudfoundry:cloudfoundry-client-reactor. Version 3.7.1 has security vulnerabilities and in order to avoid them, an explicit version is required. -->
+            <!-- https://mvnrepository.com/artifact/com.squareup.wire/wire-runtime -->
+            <dependency>
+                <groupId>com.squareup.wire</groupId>
+                <artifactId>wire-runtime</artifactId>
+                <version>${wire-runtime.version}</version>
+            </dependency>
             <!-- https://mvnrepository.com/artifact/org.bouncycastle/bcpkix-fips -->
             <dependency>
                 <groupId>org.bouncycastle</groupId>