Issue #SBCOSS-607: Vulnerability fixes

[chethann007]

Summary

This PR applies security vulnerability fixes by updating dependencies to patched versions and aligning libraries across modules to ensure compliance, stability, and compatibility.

Description by Korbit AI

What change is being made?

Update project dependencies and exclusion configurations in multiple pom.xml files to resolve known vulnerabilities associated with outdated library versions.

Why are these changes being made?

To address security vulnerabilities, remove outdated dependency versions and replace them with more secure versions. This approach not only resolves the identified vulnerabilities but also ensures continued compatibility and functionality of the software. The exclusions ensure unnecessary or vulnerable transitive dependencies are not included, mitigating potential security risks.

Is this description stale? Ask me to generate a new description by commenting /korbit-generate-pr-description

[korbit-ai]

I've completed my review and didn't find any issues... but I did find this bear.

/  \.-"""-./  \
\    -   -    /
 |   o   o   |
 \  .-'''-.  /
  '-\__Y__/-'
     `---`

Check out our docs on how you can make Korbit work best for you and your team.

Loving Korbit!? Share us on LinkedIn Reddit and X

[Copilot]

Pull Request Overview

This PR addresses security vulnerabilities by updating dependencies to patched versions across multiple modules. The changes focus on excluding problematic transitive dependencies and explicitly adding secure versions of critical libraries.

Key changes include:

• Upgrading vulnerable dependencies like netty, commons-collections, jackson-databind, and commons-text
• Adding exclusions for transitive dependencies with known security issues
• Explicitly managing dependency versions to ensure consistent security compliance

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
service/pom.xml	Excludes vulnerable netty dependencies and adds secure versions for codec-http and netty-all
es-utils/pom.xml	Excludes commons-collections from json-lib and adds secure commons-collections version
certificate-migration/pom.xml	Major dependency updates including jackson-databind, hadoop-common, zookeeper, and avro with exclusions
cert-processor/pom.xml	Similar security updates as certificate-migration plus commons-text version upgrade

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}