You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@maven.apache.org by "Slawomir Jaranowski (Jira)" <ji...@apache.org> on 2022/10/31 15:53:00 UTC

[jira] [Closed] (MSHARED-1156) Upgrade commons-io to 2.11.0

     [ https://issues.apache.org/jira/browse/MSHARED-1156?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Slawomir Jaranowski closed MSHARED-1156.
----------------------------------------
    Resolution: Duplicate

> Upgrade commons-io to 2.11.0
> ----------------------------
>
>                 Key: MSHARED-1156
>                 URL: https://issues.apache.org/jira/browse/MSHARED-1156
>             Project: Maven Shared Components
>          Issue Type: Task
>          Components: maven-shared-utils
>    Affects Versions: maven-shared-utils-3.3.4
>            Reporter: David Grieve
>            Priority: Blocker
>
> Currently, maven-shared-utils depends on commons-io:2.6 which has a security vulnerability. 
> [CVE - CVE-2021-29425 (mitre.org)|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29425]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)