Merge branch 'feature/vulnerability' into develop

pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<groupId>org.springframework.boot</groupId>
 		<artifactId>spring-boot-starter-parent</artifactId>
-		<version>2.7.3</version>
+		<version>2.7.18</version>
 		<relativePath />
 		<!-- lookup parent from repository -->
 	</parent>
@@ -32,6 +32,7 @@
 		<sonar.exclusions>
 			src/main/java/it/finanze/sanita/fse2/ms/gtwfhirmappingenginems/config/**/*.*
 		</sonar.exclusions>
+		<logback.version>1.2.13</logback.version>
 	</properties>
 
 	<dependencies> 
@@ -40,6 +41,12 @@
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter-test</artifactId>
 			<scope>test</scope>
+			<exclusions>
+				<exclusion>
+					<groupId>org.yaml</groupId>
+					<artifactId>snakeyaml</artifactId>
+				</exclusion>
+			</exclusions>
 		</dependency>
 
 
@@ -124,6 +131,12 @@
 			<groupId>org.springdoc</groupId>
 			<artifactId>springdoc-openapi-ui</artifactId>
 			<version>1.6.11</version>
+			<exclusions>
+				<exclusion>
+					<groupId>org.yaml</groupId>
+					<artifactId>snakeyaml</artifactId>
+				</exclusion>
+			</exclusions>
 		</dependency>
 
 		<!-- JSOUP -->
@@ -134,20 +147,20 @@
 		</dependency>
 
 		<!-- MATCHBOX -->
+		<!-- https://mvnrepository.com/artifact/health.matchbox/matchbox-engine -->
 		<dependency>
-			<groupId>com.matchbox</groupId>
-			<artifactId>matchbox</artifactId>
-			<version>1.0</version>
-			<scope>system</scope>
-			<systemPath>${project.basedir}/src/main/resources/matchbox-engine.jar</systemPath>
+		    <groupId>health.matchbox</groupId>
+		    <artifactId>matchbox-engine</artifactId>
+		    <version>3.2.2</version>
 		</dependency>
-		
+
 		<!-- FHIR -->
 	    <dependency>
 		      <groupId>ca.uhn.hapi.fhir</groupId>
 		      <artifactId>org.hl7.fhir.validation</artifactId>
-		      <version>5.6.88</version>
+				<version>5.6.971</version>				
 	    </dependency>
+
 
 		<!-- SHEDLOCK -->
 		<dependency>
@@ -178,6 +191,12 @@
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
+			<dependency>
+				<groupId>com.fasterxml.jackson.core</groupId>
+				<artifactId>jackson-databind</artifactId>
+				<version>2.13.5</version>
+				<scope>compile</scope>
+			</dependency>
 		</dependencies>
 	</dependencyManagement>