The Apache Commons FileUpload team is pleased to announce the release of Apache Commons FileUpload 2.0.0-M4.
The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to Servlets and web applications. This version requires Java 11 or above. This release requires Java 11. Changes in version 2.0.0-M4 include: New features: o SECURITY - CVE-2025-48976. Add partHeaderSizeMax, a new limit that sets a maximum number of bytes for each individual multipart header. The default is 512 bytes. Thanks to Mark Thomas. Fixed Bugs: o Simplify exception handling in FileItem API #309. Thanks to Basil Crow. For complete information on Apache Commons FileUpload, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons FileUpload website: https://commons.apache.org/proper/commons-fileupload/ Download it from https://commons.apache.org/proper/commons-fileupload/download_fileupload.cgi Gary Gregory Apache Commons
