[ https://issues.apache.org/jira/browse/TINKERPOP-2185?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16809001#comment-16809001 ]
Robert Dale commented on TINKERPOP-2185: ---------------------------------------- [~alexott] do you have a link to a vulnerability report? > Use commons-configuration2 instead of commns-configuration > ---------------------------------------------------------- > > Key: TINKERPOP-2185 > URL: https://issues.apache.org/jira/browse/TINKERPOP-2185 > Project: TinkerPop > Issue Type: Bug > Components: structure > Affects Versions: 3.3.6, 3.4.1 > Reporter: Alex Ott > Assignee: stephen mallette > Priority: Major > > Product called Whitesource reports vulnerabilities in the > commons-configuration 1.10 that is dependency of the gremlin-core module. As > result, some projects couldn't be allowed to production because of the > failing check. -- This message was sent by Atlassian JIRA (v7.6.3#76005)