This is an automated email from the ASF dual-hosted git repository.
ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-vfs.git
The following commit(s) were added to refs/heads/master by this push:
new bb3f192f2 Add a reference to safe deserlialization
bb3f192f2 is described below
commit bb3f192f26dc36e07cbd483745841a2864a130b8
Author: Gary Gregory <[email protected]>
AuthorDate: Thu Mar 19 23:46:57 2026 +0000
Add a reference to safe deserlialization
---
src/site/xdoc/security.xml | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/src/site/xdoc/security.xml b/src/site/xdoc/security.xml
index 70fdb0f27..374ec1834 100644
--- a/src/site/xdoc/security.xml
+++ b/src/site/xdoc/security.xml
@@ -51,5 +51,10 @@
<li><a
href="https://www.cve.org/CVERecord?id=CVE-2025-30474";>CVE-2025-30474</a>:
Apache Commons VFS: Failing to find an FTP file can reveal the URI's password
in an error message</li>
</ul>
</section>
+ <section name="Safe Deserialization">
+ <p>
+ For information about safe deserialization, please see <a
href="https://commons.apache.org/io/description.html#Safe_Deserialization";>Safe
Deserialization</a>.
+ </p>
+ </section>
</body>
</document>
