[ https://issues.apache.org/jira/browse/TAP5-2794?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Thiago Henrique De Paula Figueiredo resolved TAP5-2794. ------------------------------------------------------- Resolution: Fixed > Upgrade away from vulnerable commons-io and commons-fileupload dependencies > --------------------------------------------------------------------------- > > Key: TAP5-2794 > URL: https://issues.apache.org/jira/browse/TAP5-2794 > Project: Tapestry 5 > Issue Type: Bug > Components: tapestry-http, tapestry-upload > Affects Versions: 5.7.0, 5.7.1, 5.7.2, 5.7.3, 5.8.0, 5.8.1, 5.8.2, 5.8.3, > 5.8.4, 5.8.5, 5.8.6, 5.8.7, 5.7.4 > Reporter: Thiago Henrique De Paula Figueiredo > Assignee: Thiago Henrique De Paula Figueiredo > Priority: Critical > Fix For: 5.9.0 > > > The vulnerabilities can be seen at > https://mvnrepository.com/artifact/org.apache.tapestry/tapestry-upload/5.9.0-preview-2. -- This message was sent by Atlassian Jira (v8.20.10#820010)