I can try to backport the fix to the 1.X branch.
-Rob
On 6/5/2019 8:09 AM, Melloware wrote:
Rob,
I 100% agree since CVE-2014-0114 has been fixed in BeanUtils I think
we need a release.
However the 1.X branch seems dormant it seems for the last 3 years
everything has been working on is BeanUtils2 which is where all the
fixes have been made?
Mello
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org
