Skip to content

RUN-3601: CVE-2025-48924 Fix#39

Merged
jtobard merged 1 commit intomasterfrom
cve-fixes
Oct 8, 2025
Merged

RUN-3601: CVE-2025-48924 Fix#39
jtobard merged 1 commit intomasterfrom
cve-fixes

Conversation

@fdevans
Copy link
Copy Markdown

@fdevans fdevans commented Oct 7, 2025

Mitigates CVE-2025-48924 by upgrading commons-lang to commons-lang3 3.18.0.

Changes:

  • Added commons-lang3 3.18.0 dependency to build.gradle
  • Configured dependency substitution to replace vulnerable commons-lang with secure commons-lang3
  • Ensures all transitive dependencies use the secure version

Security Impact:
This change addresses the security vulnerability identified in CVE-2025-48924 by replacing the vulnerable commons-lang 2.x library with the secure commons-lang3 3.18.0 version.

Mitigates CVE-2025-48924 by upgrading commons-lang to commons-lang3 3.18.0.
- Added commons-lang3 3.18.0 dependency to build.gradle
- Configured dependency substitution to replace vulnerable commons-lang with secure commons-lang3
- Ensures all transitive dependencies use the secure version
Copilot AI review requested due to automatic review settings October 7, 2025 23:36
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@fdevans fdevans requested a review from a team October 7, 2025 23:40
@jtobard jtobard merged commit 2b92761 into master Oct 8, 2025
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants