[Snyk] Fix for 2 vulnerabilities

[macroscope-cloud]

Snyk has created this PR to fix 2 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• examples/iOS-Hybrid-App-Java-Server/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Improper Authentication SNYK-JAVA-ORGAPACHETOMCATEMBED-17732890	726	org.apache.tomcat.embed:tomcat-embed-core: 11.0.12 -> 11.0.23 org.apache.tomcat.embed:tomcat-embed-websocket: 11.0.12 -> 11.0.23 No Known Exploit
	Detection of Error Condition Without Action SNYK-JAVA-ORGAPACHETOMCATEMBED-17733746	721	org.apache.tomcat.embed:tomcat-embed-core: 11.0.12 -> 11.0.23 org.apache.tomcat.embed:tomcat-embed-websocket: 11.0.12 -> 11.0.23 No Known Exploit

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Authentication

[macroscope-cloud]

This is a minor version upgrade that includes numerous bug fixes, security patches, and dependency updates. While most changes are non-breaking, version 11.0.23 introduces a specific breaking change that requires attention.

Potential Breaking Change:

• EncryptInterceptor for Clustering: According to the official migration guide, version 11.0.23 introduces a breaking change for users of the EncryptInterceptor in a clustered environment. An additional piece of data is now required in the cluster data stream. Consequently, all cluster nodes must be stopped and restarted to complete the upgrade; a rolling update will fail. [6]

Other Notable Changes (11.0.13 - 11.0.23):

• Bug Fixes: Includes fixes for request processing over AJP, cookie cloning, and handling of invalid SPNEGO tokens. [2]
• Security Patches: This version range incorporates multiple security fixes. Upgrading is recommended to ensure all vulnerabilities are addressed.

Recommendation:

If you are not using Tomcat's clustering feature with the EncryptInterceptor, this upgrade can be considered low risk. If you are using it, you must plan for a full cluster restart. All users should verify application functionality after the upgrade due to the large number of bug fixes.

Source: Apache Tomcat 11 Changelog, Apache Tomcat 11 Migration Guide

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.