[MSHARED-1450] Make release of 'maven-shared-utils' to fix CVE-2024-47554

[jira-importer]

jycr opened MSHARED-1450 and commented

The latest current version of maven-shared-utils 3.4.2 (released on May 15, 2023) is vulnerable to CVE-2024-47554.

Commit 14d655b was added to fix this issue in the main branch on Mar 30, 2024.

Can you create a new version of maven-shared-utils that includes this commit to fix this CVE?

---

Affects: maven-shared-utils-3.4.2

Issue Links:

• MSHARED-1449 Make release of 'file-management' to fix CVE-2024-47554
  ("is a clone of")

[jira-importer]

Michael Osipov commented

You can always override the dependency if this is concern to you, no?

[jira-importer]

Elliotte Rusty Harold commented

We don't generally track releases as issues here.