We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents b76f726 + 694c97b commit 36872a0Copy full SHA for 36872a0
pom.xml
@@ -171,8 +171,8 @@
171
<dependency>
172
<groupId>commons-beanutils</groupId>
173
<artifactId>commons-beanutils</artifactId>
174
- <!-- We need to use 1.9.2 (or later) here to address CVE-2014-0114. -->
175
- <version>1.9.3</version>
+ <!-- We need to use 1.9.4 (or later) here to address CVE-2014-0114 and CVE-2019-10086. -->
+ <version>1.9.4</version>
176
<!-- NOTE: commons-beanutils uses commons-collections 3.2.2. We use
177
commons-collections 4.2. Package names are different so this shouldn't
178
cause any problems as long as 3.x doesn't have any CVEs. May have to
0 commit comments