[
https://issues.apache.org/jira/browse/FOP-3051?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17511144#comment-17511144
]
ningpeipei commented on FOP-3051:
---------------------------------
i use fop and poi in my project, i want upgrade the poi version to 5.2.x,
but the new poi version depend on commons-io 2.11( fop 2.7 depend 1.3.1 ),
so i cant upgrade.
when release this ?
thank you!
> Upgrade to Commons IO 2.11
> --------------------------
>
> Key: FOP-3051
> URL: https://issues.apache.org/jira/browse/FOP-3051
> Project: FOP
> Issue Type: Bug
> Reporter: PJ Fanning
> Assignee: Simon Steiner
> Priority: Major
> Fix For: trunk
>
>
> [https://mvnrepository.com/artifact/org.apache.xmlgraphics/xmlgraphics-commons/2.7]
> v2.7 depends on a commons-io release that has a CVE
>
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
