[Snyk] Upgrade org.apache.cxf:cxf-spring-boot-starter-jaxws from 3.2.1 to 3.6.2

[alanmaydwell]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade org.apache.cxf:cxf-spring-boot-starter-jaxws from 3.2.1 to 3.6.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 49 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2023-09-13.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Information Exposure SNYK-JAVA-ORGAPACHECXF-3168313	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Man-in-the-Middle (MitM) SNYK-JAVA-ORGAPACHECXF-31691	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Server-side Request Forgery (SSRF) SNYK-JAVA-ORGAPACHECXF-3168315	525/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JAVA-ORGAPACHECXF-1039798	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Denial of Service (DoS) SNYK-JAVA-ORGCRYPTACULAR-543303	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Insecure Encryption SNYK-JAVA-ORGBOUNCYCASTLE-32361	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Insecure Encryption SNYK-JAVA-ORGBOUNCYCASTLE-32362	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Signature Validation Bypass SNYK-JAVA-ORGBOUNCYCASTLE-32364	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Insecure Encryption SNYK-JAVA-ORGBOUNCYCASTLE-32366	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Information Exposure SNYK-JAVA-ORGBOUNCYCASTLE-1035561	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Insufficient Validation SNYK-JAVA-ORGBOUNCYCASTLE-32340	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Insecure Encryption SNYK-JAVA-ORGBOUNCYCASTLE-32368	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Insecure Encryption SNYK-JAVA-ORGBOUNCYCASTLE-32369	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Improper Input Validation SNYK-JAVA-ORGAPACHESANTUARIO-1655558	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	XML External Entity (XXE) Injection SNYK-JAVA-ORGAPACHESANTUARIO-460281	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JAVA-ORGAPACHECXF-542666	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Denial of Service (DoS) SNYK-JAVA-ORGAPACHECXF-480439	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	XML External Entity (XXE) Injection SNYK-JAVA-COMFASTERXMLWOODSTOX-2928754	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLWOODSTOX-3091135	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Deserialization of Untrusted Data SNYK-JAVA-COMGOOGLEGUAVA-32236	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Timing Attack SNYK-JAVA-ORGBOUNCYCASTLE-32363	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Cryptographic Issues SNYK-JAVA-ORGBOUNCYCASTLE-32367	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Information Disclosure SNYK-JAVA-COMGOOGLEGUAVA-1015415	525/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
	Insufficient Validation SNYK-JAVA-ORGBOUNCYCASTLE-32365	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Information Exposure SNYK-JAVA-ORGBOUNCYCASTLE-173771	525/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs