[ 
https://issues.apache.org/jira/browse/BEANUTILS-532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17039179#comment-17039179
 ] 

Melloware commented on BEANUTILS-532:
-------------------------------------

[~ggregory][~avanthikanc] For BeanUtils2 the Commons Collection depedency is 
removed entirely!

See PR: https://github.com/apache/commons-beanutils/pull/9/files
See PR: https://github.com/apache/commons-beanutils/pull/8/files

> Require commons-beanutils library which supports commons-collections-4.1 
> version 
> ---------------------------------------------------------------------------------
>
>                 Key: BEANUTILS-532
>                 URL: https://issues.apache.org/jira/browse/BEANUTILS-532
>             Project: Commons BeanUtils
>          Issue Type: Bug
>          Components: Bean-Collections
>            Reporter: AvanthikaNC
>            Priority: Blocker
>         Attachments: image-2020-01-31-14-52-43-114.png
>
>
> Hi Team,
>  
>  We are working on ATM SWITCH project and the project currently uses 
> commons-beanutils library 1.9.4 and we have upgraded to 
> commons-collections-4.1 as part of our project requirement as it contained 
> vulnerabilities.
> We are facing some errors due to the above mentioned upgrade as 
> commons-beanutils library 1.9.4 will support commons-collections 3.2.2 
> version.
> Now as per our requirement we cannot downgrade common-collections library but 
> we need commons-beanutils library which supports commons-collections4-4.1 
> version.
> Please provide your response asap.
> Thanks



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to