Pull #3162: Update version of commons-collections to 3.2.2 to fix security vulnerability CVE-2015-6420

This commit is contained in:
akhil 2016-05-08 09:16:45 -04:00 committed by Roman Ivanov
parent 67e6b46e9f
commit e7e028cadd
1 changed files with 15 additions and 0 deletions

15
pom.xml
View File

@ -232,6 +232,21 @@
<groupId>commons-beanutils</groupId>
<artifactId>commons-beanutils</artifactId>
<version>1.9.2</version>
<!--Upgrading to commons-collections 3.2.2 to fix security vulnerability CVE-2015-6420.
This change can be reverted when upgrading to commons-beanutils 1.9.3
https://issues.apache.org/jira/browse/BEANUTILS-482-->
<exclusions>
<exclusion>
<groupId>commons-collections</groupId>
<artifactId>commons-collections</artifactId>
</exclusion>
</exclusions>
</dependency>
<!-- remove commons-collections dependency after commons-beanutils 1.9.3 -->
<dependency>
<groupId>commons-collections</groupId>
<artifactId>commons-collections</artifactId>
<version>3.2.2</version>
</dependency>
<dependency>
<groupId>commons-cli</groupId>