fix: Update commons-io dependency from 2.6 to 2.16.1+ to fix security…

[jwson-automation]

Security Vulnerability Report: commons-io 2.6

Description

The flutter_image_compress_common package currently uses commons-io version 2.6, which has known security vulnerabilities that should be updated to version 2.16.1 or higher.

Affected File

• packages/flutter_image_compress_common/android/build.gradle
• Current: implementation 'commons-io:commons-io:2.6'
• Should be: implementation 'commons-io:commons-io:2.16.1'

Security Issues

• CVE-2024-47554: Path traversal vulnerability in commons-io 2.6
• Severity: High
• CVSS Score: 7.5

Proposed Solution

Update the dependency in build.gradle:

dependencies {
    implementation 'androidx.exifinterface:exifinterface:1.3.3'
    implementation 'androidx.heifwriter:heifwriter:1.0.0'
    implementation 'commons-io:commons-io:2.16.1' // Updated from 2.6
}

[jwson-automation]

@CaiJingLong
Thank you for providing good OSS, Could I get check about this bugfix commit?

[jwson-automation]

@CaiJingLong is there plan of new version release? I wanna update to fixed version :)

[jwson-automation]

@CaiJingLong Remind

[jwson-automation]

@CaiJingLong 👀