(cherry picked from commit d8909d0)

Author: sgrampone

common/pom.xml

@@ -33,7 +33,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-lang3</artifactId>
-            <version>3.18.0</version>
+            <version>${commons.lang3.version}</version>
         </dependency>
 		<dependency>
 			<groupId>commons-io</groupId>

gxodata/pom.xml

@@ -22,24 +22,48 @@
 		<dependency>
 			<groupId>org.apache.olingo</groupId>
 			<artifactId>odata-commons-api</artifactId>
-			<version>4.9.0</version>
+			<version>5.0.0</version>
 		</dependency>
 		<dependency>
 			<groupId>org.apache.olingo</groupId>
 			<artifactId>odata-commons-core</artifactId>
-			<version>4.9.0</version>
+			<version>5.0.0</version>
 		</dependency>
 		<dependency>
 			<groupId>org.apache.olingo</groupId>
 			<artifactId>odata-client-api</artifactId>
-			<version>4.9.0</version>
+			<version>5.0.0</version>
 		</dependency>
 		<dependency>
 			<groupId>org.apache.olingo</groupId>
 			<artifactId>odata-client-core</artifactId>
-			<version>4.9.0</version>
+			<version>5.0.0</version>
 		</dependency>
-	</dependencies>
+        <!-- overwrite odata-client-core jackson-core dependency due to CVEs -->
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-core</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
+        <!-- overwrite odata-client-core jackson-databind dependency due to CVEs -->
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
+        <!-- overwrite odata-client-core commons-io dependency due to CVEs -->
+        <dependency>
+            <groupId>commons-io</groupId>
+            <artifactId>commons-io</artifactId>
+            <version>${commons-io.version}</version>
+        </dependency>
+        <!-- overwrite odata-client-core commons-lang3   dependency due to CVEs -->
+        <dependency>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-lang3</artifactId>
+            <version>${commons.lang3.version}</version>
+        </dependency>
+    </dependencies>
 
 	<build>
 		<finalName>gxodata</finalName>

pom.xml

@@ -37,6 +37,7 @@
         <commons-codec.version>1.15</commons-codec.version>
         <xmlsec.version>3.0.3</xmlsec.version>
         <jose.version>10.4</jose.version>
+        <commons.lang3.version>3.18.0</commons.lang3.version>
 	</properties>
 
 	<organization>