Re: Release commons-lang:2.6.1 with a fix for CVE-2025-48924

[Vladimir Sitnikov]

>In which case it should be reported against 3.x

Frankly, is there a difference between a single CVE mentioning both 2x and
3.x
from two CVEs (one for 2.x and one for 3.x)?

PS CVE-2025-48924 was filed against both 2.x and 3.x

Vladimir