[JIRA] (JENKINS-61511) Outdated/vulnerable dependency (commons-io)

[foundation-security-memb...@cloudbees.com (JIRA)]

Title: Message Title

CloudBees Foundation Security created an issue   Jenkins / JENKINS-61511 Outdated/vulnerable dependency (commons-io) Issue Type: Bug Assignee: Craig Barber Components: google-storage-plugin Created: 2020-03-18 15:57 Priority: Major Reporter: CloudBees Foundation Security The library commons-io contains a vulnerability in all released versions. The correction is planned for 2.7, but unreleased yet. To prevent any issue with this library, please ensure you are not using FileNameUtils.normalize and post your analysis here. Ticket to follow the vulnerability: https://issues.apache.org/jira/browse/IO-559 by Ramón León Add Comment   This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.205206.1584547058000.8985.1584547080270%40Atlassian.JIRA.