[Snyk] Fix for 2 vulnerabilities

[macroscope-cloud]

Snyk has created this PR to fix 2 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• examples/iOS-Hybrid-App-Java-Server/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Improper Authentication SNYK-JAVA-ORGAPACHETOMCATEMBED-17732890	726	org.apache.tomcat.embed:tomcat-embed-core: 11.0.11 -> 11.0.23 org.apache.tomcat.embed:tomcat-embed-websocket: 11.0.11 -> 11.0.23 No Known Exploit
	Detection of Error Condition Without Action SNYK-JAVA-ORGAPACHETOMCATEMBED-17733746	721	org.apache.tomcat.embed:tomcat-embed-core: 11.0.11 -> 11.0.23 org.apache.tomcat.embed:tomcat-embed-websocket: 11.0.11 -> 11.0.23 No Known Exploit

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Authentication

[macroscope-cloud]

This upgrade to Tomcat 11.0.23 is a minor update but includes a specific breaking change for a particular configuration and other updates that warrant verification.

Breaking Change for Clustering:

• Version 11.0.23 introduces a breaking change for users of the EncryptInterceptor in a clustered environment. This change, which adds replay protection, requires that all nodes in the cluster are stopped and restarted to perform the migration. Running a mixed-version cluster with this interceptor enabled will cause nodes to fail to send or receive cluster messages.

Other Notable Changes:

• WebSocket API: The WebSocket API has been updated to align with the latest proposals from the Jakarta WebSocket project. This includes making the WebSocketSession instance available via SendResult. Applications using tomcat-embed-websocket should verify their implementation against these changes.
• General: The release also includes numerous bug fixes, performance improvements, and dependency updates.

Recommendation:

• If you are using Tomcat clustering with the EncryptInterceptor, you must plan for a full cluster restart during the upgrade.
• It is recommended to review your application's WebSocket functionality to ensure compatibility with the updated API.

Source: Apache Tomcat 11 Changelog, Apache Tomcat 11 Migration Guide

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.