Please update components (at least 3 critical vulns)

[eryabies]

Hi!

Can you please update components under the EJBCA?

# docker scout cves --format only-packages --only-vuln-packages keyfactor/ejbca-ce@sha256:36038f2d1650b26499b63f6c8090ec39e52f1fd4af3f53d197e9b6b7ca016aea`

                    Name                       Version                Type            Vulnerabilities

  com.fasterxml.jackson.core/jackson-databind  2.13.3                 maven     0C     2H     0M     0L
  com.fasterxml.jackson.core/jackson-databind  2.12.7                 maven     0C     2H     0M     0L
  com.fasterxml.woodstox/woodstox-core         6.2.8                  maven     0C     1H     1M     0L
  com.google.guava/guava                       31.1-jre               maven     0C     0H     1M     1L
  io.netty/netty-handler                       4.1.79.Final           maven     0C     0H     1M     0L
  io.undertow/undertow-core                    2.2.19.Final           maven     1C     3H     1M     0L
  net.minidev/json-smart                       2.4.7                  maven     0C     1H     0M     0L
  org.apache.cxf/cxf-core                      3.4.7                  maven     1C     1H     0M     0L
  org.apache.sshd/sshd-common                  2.7.0                  maven     1C     0H     1M     0L
  org.bitbucket.b_c/jose4j                     0.7.11                 maven     0C     0H     1M     0L     1?
  org.eclipse.jgit/org.eclipse.jgit            5.13.0.202109080827-r  maven     0C     1H     0M     0L
  org.glassfish/jakarta.el                     3.0.3.jbossorg-4       maven     0C     0H     1M     0L
  org.json/json                                20220924               maven     0C     1H     0M     0L
  org.jsoup/jsoup                              1.14.2                 maven     0C     0H     1M     0L
  org.wildfly.security/wildfly-elytron         1.19.1.Final           maven     0C     1H     0M     0L
  org.yaml/snakeyaml                           1.29                   maven     0C     2H     5M     0L

Thanks!

[primetomas]

Components are updated continuously. We also evaluate CVEs list to evaluate if they affect the product or are false positives.

[primetomas]

Thanks for the report though, we will compare it against our internal scanning/evaluation.