[OOZIE-3653] Upgrade commons-io to 2.11.0

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.2.1
• Fix Version/s: 5.3.0
• Assignee: Ashutosh Gupta
• Reporter: Ashutosh Gupta
• Created: 04/Feb/22 08:19
• Updated: 08/Feb/22 14:44
• Resolved: 08/Feb/22 14:44

Description

Current commons-io is using 2.4 which has the following vulnerabilities

Direct vulnerabilities:
CVE-2021-29425

Vulnerabilities from dependencies:
CVE-2020-15250

 

We can upgrade to 2.8.0