[Snyk] Security upgrade org.apache.cxf:cxf-spring-boot-starter-jaxws from 3.3.4 to 4.1.0

[Ahaochan]

Snyk has created this PR to fix 16 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• ahao-spring-boot-webservice-cxf/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Path Traversal SNYK-JAVA-ORGSPRINGFRAMEWORK-7945490	756	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade Proof of Concept
	Denial of Service (DoS) SNYK-JAVA-ORGAPACHETOMCATEMBED-6435948	696	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade Proof of Concept
	Open Redirect SNYK-JAVA-ORGSPRINGFRAMEWORK-6261586	676	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade Proof of Concept
	Uncaught Exception SNYK-JAVA-ORGAPACHETOMCATEMBED-8383920	674	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit
	Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538	649	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit
	Insufficient Session Expiration SNYK-JAVA-ORGAPACHETOMCATEMBED-7430175	649	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit
	Allocation of Resources Without Limits or Throttling SNYK-JAVA-ORGAPACHETOMCATEMBED-8073090	649	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit
	Path Traversal SNYK-JAVA-ORGSPRINGFRAMEWORK-8230373	649	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit
	Denial of Service (DoS) SNYK-JAVA-ORGAPACHETOMCATEMBED-6435950	589	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit
	Open Redirect SNYK-JAVA-ORGSPRINGFRAMEWORK-6444790	569	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit
	Denial of Service (DoS) SNYK-JAVA-ORGSPRINGFRAMEWORK-7687447	559	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit
	Open Redirect SNYK-JAVA-ORGSPRINGFRAMEWORK-6597980	484	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit
	Improper Handling of Case Sensitivity SNYK-JAVA-ORGSPRINGFRAMEWORK-8230364	329	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit
	Improper Handling of Case Sensitivity SNYK-JAVA-ORGSPRINGFRAMEWORK-8230365	329	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit
	Improper Handling of Case Sensitivity SNYK-JAVA-ORGSPRINGFRAMEWORK-8230366	329	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit
	Improper Handling of Case Sensitivity SNYK-JAVA-ORGSPRINGFRAMEWORK-8230368	329	org.apache.cxf:cxf-spring-boot-starter-jaxws: 3.3.4 -> 4.1.0 Major version upgrade No Known Exploit

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Insufficient Session Expiration
🦉 Allocation of Resources Without Limits or Throttling
🦉 More lessons are available in Snyk Learn