Re: [PR] Bump org.apache.commons:commons-lang3 from 3 .17.0 to 3.18.0 in /velocity-engine-core [velocity-engi ne]

jorsol (via GitHub) <[email protected]> Thu, 17 Jul 2025 20:22:51 -0000

Newsgroups	gmane.comp.jakarta.velocity.devel
Message-ID	<PR_kwDOAN72MM6eltH3-ae920493-c99b-46ed-870b-754eaa4876c2@gitbox.apache.org>

jorsol commented on PR #58:
URL: https://github.com/apache/velocity-engine/pull/58#issuecomment-3085360150

   This fixes the following CVE: https://www.cve.org/CVERecord?id=CVE-2025-48924
   
   Even if the issue does not directly affect the project, this dependency should be updated, and a new release should be made to silence security scanners.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]