[ https://issues.apache.org/jira/browse/VELOCITY-918?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16885837#comment-16885837 ]
Shubhankar Singh commented on VELOCITY-918: ------------------------------------------- [~michael-o] Can you please share the link where I can find the version 2.1 maven dependency as you mentioned in the comment. I can find the latest version as 1.7(https://mvnrepository.com/artifact/org.apache.velocity/velocity) which depends on commons collections. > Using commons-collection version 3.2.1 which having vulnerabilities > ------------------------------------------------------------------- > > Key: VELOCITY-918 > URL: https://issues.apache.org/jira/browse/VELOCITY-918 > Project: Velocity > Issue Type: Bug > Reporter: Shubhankar Singh > Priority: Major > Attachments: vulnerability.PNG > > -- This message was sent by Atlassian JIRA (v7.6.14#76016) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@velocity.apache.org For additional commands, e-mail: dev-h...@velocity.apache.org