You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "David Grieve (Jira)" <ji...@apache.org> on 2022/10/31 15:40:00 UTC

[jira] [Created] (MSHARED-1156) Upgrade commons-io to 2.11.0

David Grieve created MSHARED-1156:
-------------------------------------

             Summary: Upgrade commons-io to 2.11.0
                 Key: MSHARED-1156
                 URL: https://issues.apache.org/jira/browse/MSHARED-1156
             Project: Maven Shared Components
          Issue Type: Task
          Components: maven-shared-utils
    Affects Versions: maven-shared-utils-3.3.4
            Reporter: David Grieve


Currently, maven-shared-utils depends on commons-io:2.6 which has a security vulnerability. 

[CVE - CVE-2021-29425 (mitre.org)|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29425]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)