Hi

Is commons-digester still an active project?
I ask because while it's not in the Attic, the last release (3.2) was in 2011.

There are two CVEs in a dependency (CVE-2019-10086 and CVE-2014-0114).

Is there going to be a commons-digester with an uplifted version of 
commons-beanutils?
Or is commons-digester destined for the Apache Attic?

regards

Alan McLachlan
ACI Worldwide
www.aciworldwide.com<http://www.aciworldwide.com/>

________________________________
[https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg]<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

Reply via email to