[Snyk] Security upgrade org.owasp.esapi:esapi from 2.5.3.1 to 2.7.0.0

[pavelbe4solutions]

Snyk has created this PR to fix 2 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Allocation of Resources Without Limits or Throttling SNYK-JAVA-COMMONSFILEUPLOAD-10363252	635	org.owasp.esapi:esapi: 2.5.3.1 -> 2.7.0.0 No Path Found No Known Exploit
	Improper Neutralization of Special Elements SNYK-JAVA-ORGOWASPESAPI-10562218	620	org.owasp.esapi:esapi: 2.5.3.1 -> 2.7.0.0 No Path Found Proof of Concept

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[dryrunsecurity]

This pull request contains an outdated dependency for the ESAPI library, which is part of an older major version line and may potentially expose the application to unpatched security risks, though no specific vulnerabilities were confirmed.

Outdated Dependency in pom.xml

Vulnerability	Outdated Dependency
Description	The ESAPI library is updated to version 2.7.0.0. While the vulnerability search did not confirm specific known vulnerabilities, the library is part of an older major version line. The OWASP ESAPI project recommends migrating to newer versions or alternative security libraries. Continuing to use an older major version may expose the application to potential unpatched security risks.

BenchmarkJava/pom.xml

Lines 795 to 801 in cf727fe

	<dependency>
	<groupId>org.owasp.esapi</groupId>
	<artifactId>esapi</artifactId>
	<version>2.7.0.0</version>
	</dependency>
	<dependency>

---

All finding details can be found in the DryRun Security Dashboard.