[Snyk] Fix for 2 vulnerabilities

[macroscope-cloud]

Snyk has created this PR to fix 2 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• examples/iOS-Hybrid-App-Java-Server/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Improper Authentication SNYK-JAVA-ORGAPACHETOMCATEMBED-17732890	726	org.apache.tomcat.embed:tomcat-embed-core: 11.0.22 -> 11.0.23 org.apache.tomcat.embed:tomcat-embed-websocket: 11.0.22 -> 11.0.23 No Known Exploit
	Detection of Error Condition Without Action SNYK-JAVA-ORGAPACHETOMCATEMBED-17733746	721	org.apache.tomcat.embed:tomcat-embed-core: 11.0.22 -> 11.0.23 org.apache.tomcat.embed:tomcat-embed-websocket: 11.0.22 -> 11.0.23 No Known Exploit

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Authentication

[macroscope-cloud]

This patch upgrade from version 11.0.22 to 11.0.23 of Apache Tomcat includes a specific breaking change for some users, alongside several bug fixes and minor improvements.

Breaking Change:

• A breaking change was introduced for the EncryptInterceptor used in Tomcat's clustering configuration. This change adds replay protection. Migrating requires all cluster nodes to be stopped and restarted. If you do not use the EncryptInterceptor in a clustered environment, this change will not affect you.

Other Notable Changes:

• Aligns the processing of the ornext flag in the rewrite valve to better match mod_rewrite.
• Ensures malformed HTTP/2 messages trigger a stream reset instead of a connection close.
• Includes various other bug fixes, such as correcting a memory leak on TLS error paths and cleaner handling of invalid SPNEGO tokens.

Recommendation:

• If you use Tomcat's clustering feature with the EncryptInterceptor, you must plan for a full cluster restart to apply this upgrade.
• For all other users, this is a low-risk bug fix release. Review the changelog for a complete list of changes.

Source: Apache Tomcat 11.0.23 Changelog

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.