Upgrade commons-io to 2.14.0 to address CVE-2024-47554

Upgraded commons-io from 2.8.0 to 2.14.0 to fix a potential denial of service vulnerability (CVE-2024-47554) in XmlStreamReader. Signed-off-by: Shrikant Temburwar <[email protected]>
fido-device-onboard · Oct 24, 2024 · a15e43b · a15e43b
1 parent 3bdf180
commit a15e43b
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/clientSdkTests/pom.xml b/clientSdkTests/pom.xml
@@ -45,7 +45,7 @@
     <dependency>
       <groupId>commons-io</groupId>
       <artifactId>commons-io</artifactId>
-      <version>2.8.0</version>
+      <version>2.14.0</version>
     </dependency>
 
 

diff --git a/pom.xml b/pom.xml
@@ -74,7 +74,7 @@
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.8.0</version>
+        <version>2.14.0</version>
       </dependency>
 
       <dependency>

diff --git a/priTests/pom.xml b/priTests/pom.xml
@@ -45,7 +45,7 @@
     <dependency>
       <groupId>commons-io</groupId>
       <artifactId>commons-io</artifactId>
-      <version>2.8.0</version>
+      <version>2.14.0</version>
     </dependency>