Hi, In order to resolve this vulnerability Apache Commons-Text needs to be updated to 1.10 – currently the Directory LDAP API is using 1.9. Are there any plans to release a build with this dependency fixed?
I can’t log this in Jira as I don’t have an account. Please see https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om for details. Kind regards, Melissa