You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@maven.apache.org by "Slawomir Jaranowski (Jira)" <ji...@apache.org> on 2022/10/31 15:52:00 UTC

[jira] [Commented] (MSHARED-1156) Upgrade commons-io to 2.11.0

    [ https://issues.apache.org/jira/browse/MSHARED-1156?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17626668#comment-17626668 ] 

Slawomir Jaranowski commented on MSHARED-1156:
----------------------------------------------

Fixed in MSHARED-1110

> Upgrade commons-io to 2.11.0
> ----------------------------
>
>                 Key: MSHARED-1156
>                 URL: https://issues.apache.org/jira/browse/MSHARED-1156
>             Project: Maven Shared Components
>          Issue Type: Task
>          Components: maven-shared-utils
>    Affects Versions: maven-shared-utils-3.3.4
>            Reporter: David Grieve
>            Priority: Blocker
>
> Currently, maven-shared-utils depends on commons-io:2.6 which has a security vulnerability. 
> [CVE - CVE-2021-29425 (mitre.org)|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29425]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)