[
https://issues.apache.org/jira/browse/TINKERPOP-2185?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16812445#comment-16812445
]
stephen mallette commented on TINKERPOP-2185:
---------------------------------------------
I've tagged this for resolution in 3.5.0 when we can allow for a major breaking
change in the API.
> Use commons-configuration2 instead of commons-configuration
> -----------------------------------------------------------
>
> Key: TINKERPOP-2185
> URL: https://issues.apache.org/jira/browse/TINKERPOP-2185
> Project: TinkerPop
> Issue Type: Bug
> Components: structure
> Affects Versions: 3.3.6, 3.4.1
> Reporter: Alex Ott
> Assignee: stephen mallette
> Priority: Major
> Fix For: 3.5.0
>
>
> Product called Whitesource reports vulnerabilities in the
> commons-configuration 1.10 that is dependency of the gremlin-core module. As
> result, some projects couldn't be allowed to production because of the
> failing check.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
