From f97b7fc441c7ba527c99d3b6473cc8ddde9eb4e3 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 2 Feb 2022 05:10:10 +0000
Subject: [PATCH] fix: webgoat-lessons/vulnerable-components/pom.xml to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-2388977
---
 webgoat-lessons/vulnerable-components/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webgoat-lessons/vulnerable-components/pom.xml b/webgoat-lessons/vulnerable-components/pom.xml
index dfc9104c640..c6ea16bf5be 100644
--- a/webgoat-lessons/vulnerable-components/pom.xml
+++ b/webgoat-lessons/vulnerable-components/pom.xml
@@ -12,7 +12,7 @@
         <dependency>
             <groupId>com.thoughtworks.xstream</groupId>
             <artifactId>xstream</artifactId>
-            <version>1.4.5</version> <!-- do not update necessary for lesson -->
+            <version>1.4.19</version> <!-- do not update necessary for lesson -->
         </dependency>
         <dependency>
             <groupId>cglib</groupId>