From 312570badd66df9c3d36559315e5b5ccabbecba1 Mon Sep 17 00:00:00 2001
From: Adam Decatur <82901628+adecatur72@users.noreply.github.com>
Date: Thu, 14 May 2026 16:11:56 -0500
Subject: [PATCH] Acs 11579 CVE vulnerabilities in alfresco-tranform-core
 (#1255) [release]

---
 pom.xml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 013a6996..24a78280 100644
--- a/pom.xml
+++ b/pom.xml
@@ -32,6 +32,8 @@
         <dependency.commons-io.version>2.20.0</dependency.commons-io.version>
         <dependency.imaging.version>1.0.0-alpha6</dependency.imaging.version>
         <dependency.snakeyaml.version>2.3</dependency.snakeyaml.version>
+        <dependency.tomcat.embed.version>11.0.22</dependency.tomcat.embed.version>
+        <dependency.activemq-client.version>6.2.5</dependency.activemq-client.version>
 
         <spotless-plugin.version>2.45.0</spotless-plugin.version>
 
@@ -151,6 +153,11 @@
                 <artifactId>alfresco-jodconverter-core</artifactId>
                 <version>${dependency.alfresco-jodconverter-core.version}</version>
             </dependency>
+            <dependency>
+                <groupId>org.apache.activemq</groupId>
+                <artifactId>activemq-client</artifactId>
+                <version>${dependency.activemq-client.version}</version>
+            </dependency>
             <dependency>
                 <groupId>org.apache.pdfbox</groupId>
                 <artifactId>pdfbox</artifactId>
@@ -197,7 +204,7 @@
             <dependency>
                 <groupId>com.github.junrar</groupId>
                 <artifactId>junrar</artifactId>
-                <version>7.5.8</version>
+                <version>7.5.10</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.commons</groupId>
@@ -210,6 +217,11 @@
                 <artifactId>commons-codec</artifactId>
                 <version>1.17.2</version>
             </dependency>
+            <dependency>
+                <groupId>org.apache.tomcat.embed</groupId>
+                <artifactId>tomcat-embed-core</artifactId>
+                <version>${dependency.tomcat.embed.version}</version>
+            </dependency>
             <dependency>
                 <groupId>org.yaml</groupId>
                 <artifactId>snakeyaml</artifactId>