From 7112a885edba0ba8a0746bd4d094c52653ce3f07 Mon Sep 17 00:00:00 2001
From: sgrampone <sgrampone@genexus.com>
Date: Thu, 13 Nov 2025 13:49:31 -0300
Subject: [PATCH] Bump wss4j libaries to version 3.0.4

---
 wrappercommon/pom.xml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/wrappercommon/pom.xml b/wrappercommon/pom.xml
index 55b0dbdea..9cf9105eb 100644
--- a/wrappercommon/pom.xml
+++ b/wrappercommon/pom.xml
@@ -32,7 +32,7 @@
         <dependency>
             <groupId>org.apache.wss4j</groupId>
             <artifactId>wss4j-ws-security-common</artifactId>
-            <version>2.4.3</version>
+            <version>3.0.4</version>
             <exclusions>
                 <exclusion>
                     <groupId>org.apache.geronimo.javamail</groupId>
@@ -43,7 +43,7 @@
         <dependency>
             <groupId>org.apache.wss4j</groupId>
             <artifactId>wss4j-ws-security-dom</artifactId>
-            <version>2.4.3</version>
+            <version>3.0.4</version>
             <exclusions>
                 <exclusion>
                     <groupId>org.apache.geronimo.javamail</groupId>
@@ -51,6 +51,12 @@
                 </exclusion>
             </exclusions>
         </dependency>
+        <!-- ovwerwrite wss4j bcpkix-jdk18on dependency due to CVEs -->
+        <dependency>
+            <groupId>org.bouncycastle</groupId>
+            <artifactId>bcpkix-jdk18on</artifactId>
+            <version>${org.bouncycastle.version}</version>
+        </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-layout-template-json</artifactId>