[
https://issues.apache.org/jira/browse/OAK-11794?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rishabh Daim updated OAK-11794:
-------------------------------
Description: commons-fileupload is only added in oak-it-osgi module and it
never used. We should remove it from oak. (was: Due to a security issue
[https://nvd.nist.gov/vuln/detail/CVE-2025-48976,] we need to bump the
commons-fileupload to 1.6.)
> remove the commons-fileupload dependency
> ----------------------------------------
>
> Key: OAK-11794
> URL: https://issues.apache.org/jira/browse/OAK-11794
> Project: Jackrabbit Oak
> Issue Type: Bug
> Reporter: Rishabh Daim
> Priority: Major
>
> commons-fileupload is only added in oak-it-osgi module and it never used. We
> should remove it from oak.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
