You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@cayenne.apache.org by "Kelly Mercier-White (Jira)" <ji...@apache.org> on 2025/07/08 08:50:00 UTC

[jira] [Created] (CAY-2893) Update velocity-engine-core dependency

Kelly Mercier-White created CAY-2893:
----------------------------------------

             Summary: Update velocity-engine-core dependency
                 Key: CAY-2893
                 URL: https://issues.apache.org/jira/browse/CAY-2893
             Project: Cayenne
          Issue Type: Improvement
            Reporter: Kelly Mercier-White


The current velocity-engine-core version pulls a vulnerable commons-io package. Upgrading velocity-engine-core to 2.4.0/2.4.1 would resolve this.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)