[XGC-144] update to latest commons-io

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.10
• Fix Version/s: main
• Assignee: Simon Steiner
• Reporter: Samael Bate
• Created: 11/Oct/24 10:47
• Updated: 11/Oct/24 10:51
• Resolved: 11/Oct/24 10:51

Description

The latest xmlgraphics-commons 2.10 release still has security vulnerability due to it's dependency on commons-io 2.11.0 which is affected by:

https://osv.dev/vulnerability/GHSA-78wr-2p64-hpwj

fixed in 2.14.0 and above.

The latest commons-io at the minute is 2.17.0 so please update to this version