search

tomdesair / tus-java-server

Library to receive tus v1.0.0 file uploads in a Java server environment
MIT License
131 stars 62 forks source link

Release latest changes #46

Closed nreinhardt closed 1 year ago

nreinhardt commented 2 years ago

The latest released version of tus-java-server contains org.apache.commons.io:commons-io:2.6 as a dependency, which is vulnerable to CVE-2021-29425. I noticed commons-io was updated in #41, but this change was never released to Maven Central. Is it easy to get another release of tus-java-server with the latest changes? Thanks!

tomdesair commented 1 year ago

Hi, thanks for checking in.

These changes have now been released to Maven Central as version 1.0.0-2.1.