Pull request #98: [EDELIVERY-13419] SA report

Merge in EDELIVERY/smp from bugfix/EDELIVERY-13419-sa-domismp-it3-3.4-vulnerable-oss to development

* commit 'bb973d42':
  [EDELIVERY-13419] SA report

pom.xml

@@ -82,7 +82,6 @@ See the Licence for the specific language governing permissions and limitations
         <commons-validator.version>1.8.0</commons-validator.version>
         <cxf-xjc-runtime.version>3.3.2</cxf-xjc-runtime.version>
         <cxf.version>3.5.8</cxf.version>
-        <ehcache.version>2.10.9.2</ehcache.version>
         <h2.version>2.2.224</h2.version>
         <hamcrest.version>2.2</hamcrest.version>
         <hibernate-jpa.version>1.0.2.Final</hibernate-jpa.version>
@@ -96,7 +95,6 @@ See the Licence for the specific language governing permissions and limitations
         <jaxb2-basics.version>1.11.1</jaxb2-basics.version>
         <org.glassfish.jaxb.jaxb-runtime.version>2.3.9</org.glassfish.jaxb.jaxb-runtime.version>
         <jakarta.xml.bind-api.version>2.3.3</jakarta.xml.bind-api.version>
-        <jstl.version>1.2</jstl.version>
         <junit-jupiter.version>5.10.2</junit-jupiter.version>
         <junit-platform-surefire-provider.version>1.3.2</junit-platform-surefire-provider.version>
         <junitparams.version>1.1.1</junitparams.version>
@@ -112,7 +110,7 @@ See the Licence for the specific language governing permissions and limitations
         <spring-boot.version>2.7.18</spring-boot.version>
         <spring-boot.tomcat.version>9.0.88</spring-boot.tomcat.version>
         <spring.security.version>5.8.12</spring.security.version>
-        <spring.version>5.3.34</spring.version>
+        <spring.version>5.3.36</spring.version>
         <xmlunit.version>2.9.1</xmlunit.version>
 
         <!-- plugins -->
@@ -507,16 +505,6 @@ See the Licence for the specific language governing permissions and limitations
                 <version>${javaee-api.version}</version>
                 <scope>compile</scope>
             </dependency>
-            <dependency>
-                <groupId>javax.servlet</groupId>
-                <artifactId>jstl</artifactId>
-                <version>${jstl.version}</version>
-            </dependency>
-            <dependency>
-                <groupId>net.sf.ehcache</groupId>
-                <artifactId>ehcache</artifactId>
-                <version>${ehcache.version}</version>
-            </dependency>
             <dependency>
                 <groupId>org.springmodules</groupId>
                 <artifactId>spring-modules-jakarta-commons</artifactId>