[ https://issues.apache.org/jira/browse/CONFIGURATION-823?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17627207#comment-17627207 ]
Gary D. Gregory commented on CONFIGURATION-823: ----------------------------------------------- As I already explained in the GitHub PR: Apache Commons Text 1.10.0 is already released, you can use it from you applications. There is no schedule as of yet for the next release of Commons Configuration. We do not create a release just to update a dependency since an app can do that on it's own. Note that we are volunteering our time. > Update Apache Commons Text from 1.9 to 1.10.0 > --------------------------------------------- > > Key: CONFIGURATION-823 > URL: https://issues.apache.org/jira/browse/CONFIGURATION-823 > Project: Commons Configuration > Issue Type: Improvement > Affects Versions: 2.8.0 > Reporter: MOREAU > Priority: Critical > Fix For: 2.9.0 > > > There is a GHSL-2022-018 / CVE-2022-42889 -- This message was sent by Atlassian Jira (v8.20.10#820010)