[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • castor-service/pom.xml

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Upgrade	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244		No	No Known Exploit
	616/1000 Why? Recently disclosed, Has a fix available, CVSS 6.6	Arbitrary Code Injection SNYK-JAVA-ORGPOSTGRESQL-2401816	org.postgresql:postgresql: 42.2.25 -> 42.3.3	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Vulnerabilities that could not be fixed

• Upgrade:
  • Could not upgrade org.springframework.boot:spring-boot-starter-actuator@2.2.4.RELEASE to org.springframework.boot:spring-boot-starter-actuator@2.3.0.RELEASE; Reason could not apply upgrade, dependency is managed externally ; Location: https://maven-central.storage-download.googleapis.com/maven2/org/springframework/boot/spring-boot-dependencies/2.2.4.RELEASE/spring-boot-dependencies-2.2.4.RELEASE.pom
  • Could not upgrade org.springframework.boot:spring-boot-starter-web@2.2.4.RELEASE to org.springframework.boot:spring-boot-starter-web@2.3.0.RELEASE; Reason could not apply upgrade, dependency is managed externally ; Location: https://maven-central.storage-download.googleapis.com/maven2/org/springframework/boot/spring-boot-dependencies/2.2.4.RELEASE/spring-boot-dependencies-2.2.4.RELEASE.pom

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Arbitrary Code Injection

[codecov[bot]]

Codecov Report

Merging #18 (7498c21) into master (ee3ace6) will not change coverage. The diff coverage is n/a.

@@            Coverage Diff            @@
##             master      #18   +/-   ##
=========================================
  Coverage     85.47%   85.47%           
  Complexity      336      336           
=========================================
  Files            61       61           
  Lines          1212     1212           
  Branches         80       80           
=========================================
  Hits           1036     1036           
  Misses          142      142           
  Partials         34       34           

---

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update ee3ace6...7498c21. Read the comment docs.

[github-actions[bot]]

This PR has been marked stale because it has been open for 90 days with no activity. It will be automatically closed in 30 days if no further activity occurs.