[
https://issues.apache.org/jira/browse/KARAF-7993?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18010572#comment-18010572
]
ASF GitHub Bot commented on KARAF-7993:
---------------------------------------
jbonofre merged PR #1980:
URL: https://github.com/apache/karaf/pull/1980
> Upgrade to commons-fileupload 1.6.0
> -----------------------------------
>
> Key: KARAF-7993
> URL: https://issues.apache.org/jira/browse/KARAF-7993
> Project: Karaf
> Issue Type: Dependency upgrade
> Components: karaf
> Reporter: Holger Friedrich
> Assignee: Jean-Baptiste Onofré
> Priority: Major
>
> Upgrade to version 1.6.0, see release notes:
> [https://commons.apache.org/proper/commons-fileupload/changes.html#a1.6.0]
>
> This also avoids
> [CVE-2025-48976|https://www.cve.org/CVERecord?id=CVE-2025-48976]
>
>
> Would be good to see this included in 4.4.8.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)