Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Auto Closed
-
None
-
None
-
None
-
None
Description
Hi, there!
We are a research team working on third-party library analysis. We have found that some widely-used third-party libraries in your project have major/critical bugs, which will degrade the quality of your project. We highly recommend you to update those libraries to new versions.
We have attached the buggy third-party libraries and corresponding jira issue links below for you to have more detailed information.
1. org.apache.logging.log4j log4j-core
version: 2.0.1
Jira issues:
Change flow logging text from "entry' to "Enter" and "exit" to "Exit"
affectsVersions:2.0,2.0.1,2.0.2,2.1,2.2,2.3,2.4,2.4.1,2.5
https://issues.apache.org/jira/projects/LOG4J2/issues/LOG4J2-1289?filter=allopenissues
AsyncLogger should not call instanceof TimestampMessage in hot path
affectsVersions:2.0.1,2.0.2,2.1,2.2,2.3,2.4,2.4.1,2.5
https://issues.apache.org/jira/projects/LOG4J2/issues/LOG4J2-1339?filter=allopenissues
PatternLayout's default charset should not be UTF-8
affectsVersions:2.0.1,2.0.2
https://issues.apache.org/jira/projects/LOG4J2/issues/LOG4J2-783?filter=allopenissues
2. org.apache.httpcomponents httpclient
version: 4.2.2
Jira issues:
Flag issues in NTLM implementation prevent authentication on some servers
affectsVersions:4.2.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1266?filter=allopenissues
NTLM: Authenticating against some servers throws an exception
affectsVersions:4.2.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1268?filter=allopenissues
BrowserCompatSpec: cookies values containing spaces are forwarded without quotes
affectsVersions:4.2.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1269?filter=allopenissues
CachingHttpClient sends a 304 Not Modified to an unconditional request
affectsVersions:4.2.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1277?filter=allopenissues
NullPointerException (apparently) when authenticating
affectsVersions:4.2.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1279?filter=allopenissues
Use of toUpperCase() in NTLM engine may fail on non-US locales
affectsVersions:4.2.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1283?filter=allopenissues
HttpClient treats URI fragments in URIs inconsistently
affectsVersions:4.2.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1286?filter=allopenissues
The HttpGet() and likely other method objects should accept only absoluteURI with path specified
affectsVersions:4.2.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1291?filter=allopenissues
proxy with kerberos auth is not woking
affectsVersions:4.2.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1293?filter=allopenissues
CircularRedirectException is falsely thrown on URI case mismatch
affectsVersions:4.1.3;4.2.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1294?filter=allopenissues
Null pointer exception when using default host and virtual host with port -1
affectsVersions:4.2.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1296?filter=allopenissues
SSLSocketFactory.createSystemSSLContext causes java.security.UnrecoverableKeyException: Password verification failed
affectsVersions:4.2.2;4.2.3;4.2.4;4.3 Alpha1;4.3 Beta1;4.3 Final
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1320?filter=allopenissues
3. org.apache.httpcomponents httpclient
version: 4.3.2
Jira issues:
AsynchronousValidationRequest and a connection pool leak
affectsVersions:4.3.1;4.3.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1441?filter=allopenissues
PoolingHttpClientConnectionManager thread safety
affectsVersions:4.3.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1453?filter=allopenissues
HttpClientBuilder.useSystemProperties() is incompatible with NTLM scheme
affectsVersions:4.3.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1457?filter=allopenissues
SystemDefaultCredentialsProvider authenticates with wrong protocol for https requests
affectsVersions:4.3.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1458?filter=allopenissues
Cached files would be deleted after CloseableHttpClient being closed.
affectsVersions:4.3.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1460?filter=allopenissues
GZIP decoding is very slow
affectsVersions:4.3.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1461?filter=allopenissues
FileBodyPart.generateContentType() method ignores ContentType parameters
affectsVersions:4.3.1;4.3.2
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1466?filter=allopenissues
CachingExec(ClientExecChain backend; HttpCache cache; CacheConfig config; AsynchronousValidator asynchRevalidator) NPE if config is null
affectsVersions:4.3.2;4.4 Alpha1
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1470?filter=allopenissues
https connections through proxies don't work if authentication is disabled
affectsVersions:4.3.2;4.3.3;4.3.4;4.4 Alpha1
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1531?filter=allopenissues
4. org.apache.httpcomponents httpclient
version: 4.3.6
Jira issues:
CloseableHttpClient.execute do not close CloseableHttpResponse
affectsVersions:4.3.6
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1588?filter=allopenissues
SSLConnectionSocketFactory not respecting enabled protocols
affectsVersions:4.3.6
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1595?filter=allopenissues
BrowserCompatHostnameVerifier doesn't recognize CN
affectsVersions:4.3.6
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1597?filter=allopenissues
HttpClient fails Basic Authentication when using RFC2617Scheme
affectsVersions:4.3.6
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1604?filter=allopenissues
Cannot upload files with HttpClient 4.3.6 using PUT/POST
affectsVersions:4.3.6
https://issues.apache.org/jira/projects/HTTPCLIENT/issues/HTTPCLIENT-1605?filter=allopenissues
5. commons-logging commons-logging
version: 1.2
Jira issues:
BufferedReader is not closed properly
affectsVersions:1.1.1;1.2
https://issues.apache.org/jira/projects/LOGGING/issues/LOGGING-163?filter=allopenissues
6. commons-cli commons-cli
version: 1.2
Jira issues:
Unable to select a pure long option in a group
affectsVersions:1.0;1.1;1.2
https://issues.apache.org/jira/projects/CLI/issues/CLI-182?filter=allopenissues
Clear the selection from the groups before parsing
affectsVersions:1.0;1.1;1.2
https://issues.apache.org/jira/projects/CLI/issues/CLI-183?filter=allopenissues
Commons CLI incorrectly stripping leading and trailing quotes
affectsVersions:1.1;1.2
https://issues.apache.org/jira/projects/CLI/issues/CLI-185?filter=allopenissues
Coding error: OptionGroup.setSelected causes java.lang.NullPointerException
affectsVersions:1.2
https://issues.apache.org/jira/projects/CLI/issues/CLI-191?filter=allopenissues
StringIndexOutOfBoundsException in HelpFormatter.findWrapPos
affectsVersions:1.2
https://issues.apache.org/jira/projects/CLI/issues/CLI-193?filter=allopenissues
HelpFormatter strips leading whitespaces in the footer
affectsVersions:1.2
https://issues.apache.org/jira/projects/CLI/issues/CLI-207?filter=allopenissues
OptionBuilder only has static methods; yet many return an OptionBuilder instance
affectsVersions:1.2
https://issues.apache.org/jira/projects/CLI/issues/CLI-224?filter=allopenissues
Unable to properly require options
affectsVersions:1.2
https://issues.apache.org/jira/projects/CLI/issues/CLI-230?filter=allopenissues
OptionValidator Implementation Does Not Agree With JavaDoc
affectsVersions:1.2
https://issues.apache.org/jira/projects/CLI/issues/CLI-241?filter=allopenissues
7. commons-collections commons-collections
version: 3.2.1
Jira issues:
Inconsistent Javadoc comment and code in addIgnoreNull(Collection<T>; T) in org.apache.commons.collections.CollectionUtils
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-400?filter=allopenissues
ListUtils.subtract is very slow
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-406?filter=allopenissues
ListOrderedSet.removeAll() is slow
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-407?filter=allopenissues
ListOrderedSet.addAll() is very slow
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-409?filter=allopenissues
Performance problem in DualHashBidiMap
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-413?filter=allopenissues
AbstractLinkedList.removeAll() is very slow
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-415?filter=allopenissues
AbstractLinkedList.retainAll() is very slow
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-417?filter=allopenissues
Surprising exception by CompositeSet in a situation where CompositeCollection works fine
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-424?filter=allopenissues
performance problem in ListOrderedMap.remove()
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-425?filter=allopenissues
performance problem in ListOrderedSet.retainAll()
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-426?filter=allopenissues
performance problem in SetUniqueList.retainAll()
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-427?filter=allopenissues
SetUniqueList may become inconsistent
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-444?filter=allopenissues
findBugs Warnings: several classes in package functors may expose their internal representation
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-453?filter=allopenissues
findBugs Warning: Flat3Map - 3 iterators which are "both an Iterator and a Map.Entry"
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-454?filter=allopenissues
wasted work in AbstractMapBag.containsAll()
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-472?filter=allopenissues
ListOrderedSet can have duplicates
affectsVersions:3.2.1;4.0
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-524?filter=allopenissues
ExtendedProperties causes AccessControlException when framework is called from a script
affectsVersions:3.2.1
https://issues.apache.org/jira/projects/COLLECTIONS/issues/COLLECTIONS-538?filter=allopenissues
8. commons-io commons-io
version: 2.0.1
Jira issues:
ClassLoaderObjectInputStream does not handle Proxy classes
affectsVersions:2.0.1
https://issues.apache.org/jira/projects/IO/issues/IO-260?filter=allopenissues
FileSystemUtils.freeSpaceKb throws exception for Windows volumes with no visible files.
affectsVersions:2.0.1
https://issues.apache.org/jira/projects/IO/issues/IO-263?filter=allopenissues
FileUtils.copyFile() throws IOException when copying large files to a shared directory (on Windows)
affectsVersions:2.0.1
https://issues.apache.org/jira/projects/IO/issues/IO-266?filter=allopenissues
Tailer returning partial lines when reaching EOF before EOL
affectsVersions:2.0.1
https://issues.apache.org/jira/projects/IO/issues/IO-274?filter=allopenissues
ReaderInputStream enters infinite loop when it encounters an unmappable character
affectsVersions:2.0.1
https://issues.apache.org/jira/projects/IO/issues/IO-277?filter=allopenissues
getPrefixLength returns null if filename has leading slashes
affectsVersions:2.0.1;2.1
https://issues.apache.org/jira/projects/IO/issues/IO-299?filter=allopenissues
ClassLoaderObjectInputStream does not handle primitive typed members
affectsVersions:2.0.1
https://issues.apache.org/jira/projects/IO/issues/IO-368?filter=allopenissues
9. commons-io commons-io
version: 2.4
Jira issues:
IOUtils copyLarge() and skip() methods are performance hogs
affectsVersions:2.3;2.4
https://issues.apache.org/jira/projects/IO/issues/IO-355?filter=allopenissues
CharSequenceInputStream#reset() behaves incorrectly in case when buffer size is not dividable by data size
affectsVersions:2.4
https://issues.apache.org/jira/projects/IO/issues/IO-356?filter=allopenissues
[Tailer] InterruptedException while the thead is sleeping is silently ignored
affectsVersions:2.4
https://issues.apache.org/jira/projects/IO/issues/IO-357?filter=allopenissues
IOUtils.contentEquals* methods returns false if input1 == input2; should return true
affectsVersions:2.4
https://issues.apache.org/jira/projects/IO/issues/IO-362?filter=allopenissues
Apache Commons - standard links for documents are failing
affectsVersions:2.4
https://issues.apache.org/jira/projects/IO/issues/IO-369?filter=allopenissues
FileUtils.sizeOfDirectoryAsBigInteger can overflow
affectsVersions:2.4
https://issues.apache.org/jira/projects/IO/issues/IO-390?filter=allopenissues
Regression in FileUtils.readFileToString from 2.0.1
affectsVersions:2.1;2.2;2.3;2.4
https://issues.apache.org/jira/projects/IO/issues/IO-453?filter=allopenissues
Correct exception message in FileUtils.getFile(File; String...)
affectsVersions:2.4
https://issues.apache.org/jira/projects/IO/issues/IO-479?filter=allopenissues
org.apache.commons.io.FileUtils#waitFor waits too long
affectsVersions:2.4
https://issues.apache.org/jira/projects/IO/issues/IO-481?filter=allopenissues
FilenameUtils should handle embedded null bytes
affectsVersions:2.4
https://issues.apache.org/jira/projects/IO/issues/IO-484?filter=allopenissues
Exceptions are suppressed incorrectly when copying files.
affectsVersions:2.4;2.5
https://issues.apache.org/jira/projects/IO/issues/IO-502?filter=allopenissues
10. commons-codec commons-codec
version: 1.10
Jira issues:
Bug in HW rule in Soundex
affectsVersions:1.10
https://issues.apache.org/jira/projects/CODEC/issues/CODEC-199?filter=allopenissues
Charsets Javadoc breaks build when using Java 8
affectsVersions:1.10
https://issues.apache.org/jira/projects/CODEC/issues/CODEC-207?filter=allopenissues
Javadoc for SHA-224 DigestUtils methods should mention Java 1.8.0 restriction instead of 1.4.0
affectsVersions:1.10
https://issues.apache.org/jira/projects/CODEC/issues/CODEC-209?filter=allopenissues
Don't deprecate Charsets Charset constants in favor of Java 7's java.nio.charset.StandardCharsets
affectsVersions:1.10
https://issues.apache.org/jira/projects/CODEC/issues/CODEC-219?filter=allopenissues
HmacUtils.updateHmac calls reset() unnecessarily
affectsVersions:1.10
https://issues.apache.org/jira/projects/CODEC/issues/CODEC-221?filter=allopenissues
InputStream not closed
affectsVersions:1.10;1.11
https://issues.apache.org/jira/projects/CODEC/issues/CODEC-225?filter=allopenissues
StringUtils.newStringxxx(null) should return null; not NPE
affectsVersions:1.10
https://issues.apache.org/jira/projects/CODEC/issues/CODEC-229?filter=allopenissues
URLCodec.WWW_FORM_URL should be private
affectsVersions:1.10
https://issues.apache.org/jira/projects/CODEC/issues/CODEC-230?filter=allopenissues
StringUtils.equals(CharSequence cs1; CharSequence cs2) can fail with String Index OBE
affectsVersions:1.10
https://issues.apache.org/jira/projects/CODEC/issues/CODEC-231?filter=allopenissues
URLCodec is neither immutable nor threadsafe
affectsVersions:1.10
https://issues.apache.org/jira/projects/CODEC/issues/CODEC-232?filter=allopenissues
11. commons-codec commons-codec
version: 1.11
Jira issues:
InputStream not closed
affectsVersions:1.10;1.11
https://issues.apache.org/jira/projects/CODEC/issues/CODEC-225?filter=allopenissues
12. org.slf4j slf4j-api
version: 1.7.21
Jira issues:
Cannot re-initialize the SimpleLogger anymore.
affectsVersions:1.7.21
https://jira.qos.ch/projects/SLF4J/issues/SLF4J-370?filter=allopenissues
Marker lost in EventRecodingLogger
affectsVersions:1.7.21
https://jira.qos.ch/projects/SLF4J/issues/SLF4J-379?filter=allopenissues
Support for JCL 1.2
affectsVersions:1.7.21
https://jira.qos.ch/projects/SLF4J/issues/SLF4J-383?filter=allopenissues
13. org.apache.commons commons-lang3
version: 3.3.2
Jira issues:
ISO 8601 misspelled throughout the Javadocs
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1001?filter=allopenissues
Several predefined ISO FastDateFormats in DateFormatUtils are incorrect
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1002?filter=allopenissues
DurationFormatUtils are not able to handle negative durations/periods
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1003?filter=allopenissues
DurationFormatUtils#formatDurationHMS implementation does not correspond to Javadoc and vice versa
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1004?filter=allopenissues
NumberUtils.createNumber(final String str) Precision will be lost
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1018?filter=allopenissues
Javadoc for EqualsBuilder.reflectionEquals() is unclear
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1035?filter=allopenissues
NumberUtils#isNumber() returns false for "+2" and true for "-2"
affectsVersions:3.1;3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1038?filter=allopenissues
Javadoc for NumberUtils.isNumber() are not clear enough
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1040?filter=allopenissues
Fix MethodUtilsTest so it does not depend on JDK method ordering
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1041?filter=allopenissues
StrSubstitutor.replaceSystemProperties does not work consistently
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1055?filter=allopenissues
NumberUtils.isNumber assumes number starting with Zero is octal
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1060?filter=allopenissues
FastDateParser error - timezones not handled correctly
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1061?filter=allopenissues
Wrong formating of time zones with daylight saving time in FastDatePrinter
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-1092?filter=allopenissues
TypeUtils.ParameterizedType#equals doesn't work with wildcard types
affectsVersions:3.3.2;3.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-1114?filter=allopenissues
Fix bug with stripping spaces on last line in WordUtils.wrap()
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-995?filter=allopenissues
FastDateFormat is case sensitive
affectsVersions:3.3.2
https://issues.apache.org/jira/projects/LANG/issues/LANG-996?filter=allopenissues
NumberUtils#createNumber() returns positive BigDecimal when negative Float is expected
affectsVersions:3.x
https://issues.apache.org/jira/projects/LANG/issues/LANG-1087?filter=allopenissues
14. commons-lang commons-lang
version: 2.4
Jira issues:
Fix case-insensitive string handling
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-432?filter=allopenissues
StringEscapeUtils.escapeHTML() does not escape chars (0x00-0x20)
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-439?filter=allopenissues
DateUtils.round doesn't work correct for Calendar.AM_PM
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-440?filter=allopenissues
Lower Ascii Characters don't get encoded by Entities.java
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-448?filter=allopenissues
Issue in HashCodeBuilder which only shows up under high load multi-threaded usage.
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-459?filter=allopenissues
Ant build file does not include ReflectTestSuite
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-463?filter=allopenissues
EqualsBuilder and HashCodeBuilder treat java.math.BigDecimal inconsistantly and break general contract of hashCode
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-467?filter=allopenissues
JDK 1.5 build/runtime failure on LANG-393 (EqualsBuilder)
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-468?filter=allopenissues
ExtendedMessageFormat: OutOfMemory with custom format registry and a pattern containing single quotes
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-477?filter=allopenissues
parseDate cannot parse ISO8601 dates produced by FastDateFormat
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-530?filter=allopenissues
DateFormatUtils.format does not correctly change Calendar TimeZone in certain situations
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-538?filter=allopenissues
StringUtils replaceEach - Bug or Missing Documentation
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-552?filter=allopenissues
Javadoc wrong for StringUtils startsWith; startsWithIgnoreCase; endsWith and endsWithIgnoreCase
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-557?filter=allopenissues
HashCodeBuilder reflectionAppend creates unnecessary copy of excludeFields
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-575?filter=allopenissues
ExceptionUtils uses mutable lock target
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-584?filter=allopenissues
ClassUtils.toClass(Object[]) throws NPE on null array element
affectsVersions:2.4
https://issues.apache.org/jira/projects/LANG/issues/LANG-587?filter=allopenissues
Sincerely~
FDU Software Engineering Lab
Feb 15th,2019