Skip to content

Commit 7067804

Browse files
Bump commons-beanutils:commons-beanutils from 1.9.4 to 1.11.0 (#881)
Bumps commons-beanutils:commons-beanutils from 1.9.4 to 1.11.0. --- updated-dependencies: - dependency-name: commons-beanutils:commons-beanutils dependency-version: 1.11.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent e2183d6 commit 7067804

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

pom.xml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -185,8 +185,8 @@
185185
<dependency>
186186
<groupId>commons-beanutils</groupId>
187187
<artifactId>commons-beanutils</artifactId>
188-
<!-- We need to use 1.9.4 (or later) here to address CVE-2014-0114 and CVE-2019-10086. -->
189-
<version>1.9.4</version>
188+
<!-- We need to use 1.11.0 (or later) here to address CVE-2014-0114 and CVE-2019-10086. -->
189+
<version>1.11.0</version>
190190
<!-- NOTE: commons-beanutils uses commons-collections 3.2.2. We use
191191
commons-collections 4.2. Package names are different so this shouldn't
192192
cause any problems as long as 3.x doesn't have any CVEs. May have to

0 commit comments

Comments
 (0)