fix(CVE-2021-43466): bump thymeleaf to 3.0.14.RELEASE (#1884)

* fix(CVE-2021-43466): bump thymeleaf to 3.0.14.RELEASE
codecentric · Dec 17, 2021 · 13aaad7 · 13aaad7
1 parent 894896d
commit 13aaad7
Showing 1 changed file with 12 additions and 2 deletions.
diff --git a/spring-boot-admin-build/pom.xml b/spring-boot-admin-build/pom.xml
@@ -42,15 +42,25 @@
                 <version>1.2.8</version>
             </dependency>
             <dependency>
-                <groupId> org.apache.logging.log4j</groupId>
+                <groupId>org.apache.logging.log4j</groupId>
                 <artifactId>log4j-to-slf4j</artifactId>
                 <version>2.16.0</version>
             </dependency>
             <dependency>
-                <groupId> org.apache.logging.log4j</groupId>
+                <groupId>org.apache.logging.log4j</groupId>
                 <artifactId>log4j-api</artifactId>
                 <version>2.16.0</version>
             </dependency>
+            <dependency>
+                <groupId>org.thymeleaf</groupId>
+                <artifactId>thymeleaf</artifactId>
+                <version>3.0.14.RELEASE</version>
+            </dependency>
+            <dependency>
+                <groupId>org.thymeleaf</groupId>
+                <artifactId>thymeleaf-spring5</artifactId>
+                <version>3.0.14.RELEASE</version>
+            </dependency>
             <!-- REMOVE END -->
             <dependency>
                 <groupId>org.springframework.boot</groupId>