I have multimodule spring boot project, In parent pom.xml I have dependencies like below 1.Spring boot dependency org.springframework.boot spring-boot-dependencies 2.3.4.RELEASE pom import

  1. azure dependency com.microsoft.azure azure-spring-boot-bom 2.3.3 pom import

and more..

In one of my child project, I am using spring security for that I have used below maven dependencies,

org.springframework.security spring-security-core 

    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-security</artifactId>
    </dependency>
    <dependency>
        <groupId>com.microsoft.azure</groupId>
        <artifactId>azure-active-directory-spring-boot-starter</artifactId>
        <exclusions>
            <exclusion>
                <groupId>com.nimbusds</groupId>
                <artifactId>nimbus-jose-jwt</artifactId>
            </exclusion>
        </exclusions>
    </dependency>
    <dependency>
        <groupId>org.springframework.security.oauth</groupId>
        <artifactId>spring-security-oauth2</artifactId>
        <version>2.1.5.RELEASE</version>
        <exclusions>
            <exclusion>
                <groupId>org.codehaus.jackson</groupId>
                <artifactId>jackson-mapper-asl</artifactId>
            </exclusion>
        </exclusions>
    </dependency>

com.microsoft.azure azure-keyvault-secrets-spring-boot-starter org.springframework.boot spring-boot-starter-logging com.nimbusds nimbus-jose-jwt

Description of child module: It is accessing azure key vault and validate whether all properties are present or not.

I did blackduck scan on above child project , I have found 1 issue for spring-security5.3.4. To fix this issue I follow below link, https://tanzu.vmware.com/security/cve-2021-22112

The above link clearly says that upgrade spring-security related dependency to version 5.3.8. All the version are coming from parent pom.xml spring boot dependency, So I need to upgrade parent spring boot version to 2.3.9 to get spring security 5.3.8 related jars. If I upgrade the spring boot version I am getting Below Error.

Error: java.lang.NoClassDefFoundError: Could not initialize class com.azure.identity.implementation.IdentityClient

Can anyone suggest me which spring boot and azure version are compatible to fix this issue?

Comment From: jgrandja

@AAvaghade Please log this issue with the Azure Identity client repository here.