You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@commons.apache.org by "Lenny Primak (Jira)" <ji...@apache.org> on 2024/10/23 13:10:00 UTC

[jira] [Commented] (BEANUTILS-532) Require commons-beanutils library which supports commons-collections-4.x version

    [ https://issues.apache.org/jira/browse/BEANUTILS-532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17892152#comment-17892152 ] 

Lenny Primak commented on BEANUTILS-532:
----------------------------------------

Please add my vote to this. We (Apache Shiro) are seeing numerous security issues with this.

I would follow what [~melloware] did and release 2.x ASAP.

If the API needs tweaking, releasing 3.x soon thereafter should not be an issues.

 

Thank you!

> Require commons-beanutils library which supports commons-collections-4.x version 
> ---------------------------------------------------------------------------------
>
>                 Key: BEANUTILS-532
>                 URL: https://issues.apache.org/jira/browse/BEANUTILS-532
>             Project: Commons BeanUtils
>          Issue Type: Bug
>          Components: Bean-Collections
>            Reporter: AvanthikaNC
>            Priority: Blocker
>         Attachments: image-2020-01-31-14-52-43-114.png
>
>
> Hi Team,
>  
>  We are working on ATM SWITCH project and the project currently uses commons-beanutils library 1.9.4 and we have upgraded to commons-collections-4.1 as part of our project requirement as it contained vulnerabilities.
> We are facing some errors due to the above mentioned upgrade as commons-beanutils library 1.9.4 will support commons-collections 3.2.2 version.
> Now as per our requirement we cannot downgrade common-collections library but we need commons-beanutils library which supports commons-collections4-4.1 version.
> Please provide your response asap.
> Thanks



--
This message was sent by Atlassian Jira
(v8.20.10#820010)