You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@sling.apache.org by "Namit Gupta (Jira)" <ji...@apache.org> on 2022/03/14 10:04:00 UTC

[jira] [Created] (SLING-11202) Replace commons-io version - version 2.6

Namit Gupta created SLING-11202:
-----------------------------------

             Summary: Replace commons-io version - version 2.6 
                 Key: SLING-11202
                 URL: https://issues.apache.org/jira/browse/SLING-11202
             Project: Sling
          Issue Type: Improvement
          Components: XSS Protection API
            Reporter: Namit Gupta


Replace commons-io version 2.6 with version 2.11 to overcome the security vulnerabilities:
 # [CVE - CVE-2021-29425 (mitre.org)|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29425]
 # [CVE - CVE-2020-15250 (mitre.org)|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250]



--
This message was sent by Atlassian Jira
(v8.20.1#820001)