Hi Team,

As per this security vulnerability CVE-2021-29425, we are using commons-io v2.4 
as a 3rd party application in our code base (Java1.7 compatible), to move to 
latest version of commons-io where the security vulnerability CVE-2021-29425 
has fixed starting from v2.7 OR v2.11.0 both are Java 1.8 compatible.

Is there any way to use v2.6(the final version commons-io which is compatible 
with Java 1.7) with security vulnerability CVE-2021-29425 in it? Or is there 
any plans to make security vulnerability CVE-2021-29425 fix on commons-io v2.6?

Please guide us. This is blocking our patch to customers.

Thanks,
Surendra

Reply via email to