Dependency org.apache.httpcomponents:httpclient, leading to CVE problem #119

in.hocg.boot.cps.autoconfiguration.impl.dataoke.lib.HttpUtils: doGet(java.lang.String)Ljava.lang.String; /download/apache-maven-3.6.3/repository_mount/org/springframework/boot/spring-boot-autoconfigure/2.2.6.RELEASE/spring-boot-autoconfigure-2.2.6.RELEASE.jar
org.apache.http.impl.client.CloseableHttpClient: execute(org.apache.http.client.methods.HttpUriRequest)Lorg.apache.http.client.methods.CloseableHttpResponse; /download/apache-maven-3.6.3/repository_mount/org/springframework/boot/spring-boot-autoconfigure/2.2.6.RELEASE/spring-boot-autoconfigure-2.2.6.RELEASE.jar
org.apache.http.impl.client.CloseableHttpClient: execute(org.apache.http.client.methods.HttpUriRequest,org.apache.http.protocol.HttpContext)Lorg.apache.http.client.methods.CloseableHttpResponse; /download/apache-maven-3.6.3/repository_mount/org/springframework/boot/spring-boot-autoconfigure/2.2.6.RELEASE/spring-boot-autoconfigure-2.2.6.RELEASE.jar
org.apache.http.impl.client.CloseableHttpClient: determineTarget(org.apache.http.client.methods.HttpUriRequest)Lorg.apache.http.HttpHost; /download/apache-maven-3.6.3/repository_mount/org/springframework/boot/spring-boot-autoconfigure/2.2.6.RELEASE/spring-boot-autoconfigure-2.2.6.RELEASE.jar
org.apache.http.client.utils.URIUtils: extractHost(java.net.URI)Lorg.apache.http.HttpHost;

[INFO] in.hocg.boot:cps-spring-boot-autoconfigure:jar:1.0.33
[INFO] +- org.apache.httpcomponents:httpclient:jar:4.5.6:compile
[INFO] |  +- org.apache.httpcomponents:httpcore:jar:4.4.13:compile
[INFO] |  \- commons-codec:commons-codec:jar:1.13:compile
[INFO] +- org.springframework.boot:spring-boot-starter-log4j2:jar:2.2.6.RELEASE:compile
[INFO] |  +- org.apache.logging.log4j:log4j-slf4j-impl:jar:2.16.0:compile
[INFO] |  |  \- org.apache.logging.log4j:log4j-api:jar:2.16.0:compile
[INFO] |  +- org.apache.logging.log4j:log4j-core:jar:2.16.0:compile
[INFO] |  +- org.apache.logging.log4j:log4j-jul:jar:2.16.0:compile
[INFO] |  \- org.slf4j:jul-to-slf4j:jar:1.7.30:compile
[INFO] +- in.hocg.boot:utils-base:jar:1.0.33:compile
[INFO] |  +- in.hocg.boot:utils-annotation:jar:1.0.33:compile
[INFO] |  +- cn.hutool:hutool-all:jar:5.3.10:compile
[INFO] |  +- com.google.guava:guava:jar:28.1-jre:compile
[INFO] |  |  +- com.google.guava:failureaccess:jar:1.0.1:compile
[INFO] |  |  +- com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava:compile
[INFO] |  |  +- com.google.code.findbugs:jsr305:jar:3.0.2:compile
[INFO] |  |  +- org.checkerframework:checker-qual:jar:2.8.1:compile
[INFO] |  |  +- com.google.errorprone:error_prone_annotations:jar:2.3.2:compile
[INFO] |  |  +- com.google.j2objc:j2objc-annotations:jar:1.3:compile
[INFO] |  |  \- org.codehaus.mojo:animal-sniffer-annotations:jar:1.18:compile
[INFO] |  +- net.jodah:typetools:jar:0.6.3:compile
[INFO] |  +- org.slf4j:slf4j-api:jar:1.7.30:compile
[INFO] |  +- org.polyjdbc:polyjdbc:jar:0.7.6:compile
[INFO] |  \- com.github.jsonzou:jmockdata:jar:4.3.0:compile
[INFO] +- org.springframework.boot:spring-boot-autoconfigure:jar:2.2.6.RELEASE:compile
[INFO] |  \- org.springframework.boot:spring-boot:jar:2.2.6.RELEASE:compile
[INFO] |     +- org.springframework:spring-core:jar:5.2.5.RELEASE:compile
[INFO] |     |  \- org.springframework:spring-jcl:jar:5.2.5.RELEASE:compile
[INFO] |     \- org.springframework:spring-context:jar:5.2.5.RELEASE:compile
[INFO] |        +- org.springframework:spring-aop:jar:5.2.5.RELEASE:compile
[INFO] |        +- org.springframework:spring-beans:jar:5.2.5.RELEASE:compile
[INFO] |        \- org.springframework:spring-expression:jar:5.2.5.RELEASE:compile
[INFO] +- org.springframework.boot:spring-boot-configuration-processor:jar:2.2.6.RELEASE:compile
[INFO] +- org.springframework.boot:spring-boot-autoconfigure-processor:jar:2.2.6.RELEASE:compile
[INFO] \- org.projectlombok:lombok:jar:1.18.12:compile