Re: Struts 6.8.0 & 7.1.0

2025-09-09 Thread Lukasz Lenart
Done https://github.com/apache/struts/pull/1328 śr., 10 wrz 2025 o 07:33 Łukasz Lenart napisał(a): > > pon., 8 wrz 2025 o 10:18 Greg Huber napisał(a): > > > > Would 6.8.0 include commons-fileupload 1.6.0 as I remember a cve in 1.5. > > As far I see this is a drop-in dependency, so each user can

Re: Struts 6.8.0 & 7.1.0

2025-09-09 Thread Łukasz Lenart
pon., 8 wrz 2025 o 10:18 Greg Huber napisał(a): > > Would 6.8.0 include commons-fileupload 1.6.0 as I remember a cve in 1.5. As far I see this is a drop-in dependency, so each user can do it independently. Cheers Łukasz - To un