[MNG-7513] Address commons-io_commons-io vulnerability found in maven latest version

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.8.6
• Fix Version/s: 3.8.7, 3.9.0, 4.0.0-alpha-2, 4.0.0
• External issue URL: https://mvnrepository.com/artifact/commons-io/commons-io/2.6
• Assignee: Michael Osipov
• Reporter: Polu Ram Charan Teja
• Created: 14/Jul/22 16:55
• Updated: 20/Dec/22 10:15
• Resolved: 18/Jul/22 16:00

Description

In the maven latest version 3.8.6 one dependency is identified with known vulnerabilities in commons-io-2.6.jar CVE-2021-29425. so please suggest if you have plan to upgrade commons-io to latest version as we are getting impacted due to security checks

Issue Links

• is duplicated by: MNG-7533 jar v2.6 has medium (CVE-2021-29425) Prisma vulnerability associated with maven v3.8.6
• links to: GitHub Pull Request #771