[ https://issues.apache.org/jira/browse/HIVE-28699?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Raghav Aggarwal updated HIVE-28699: ----------------------------------- Description: commons-beanutils has CVE and it also transitively brings commons-collections3.x. After requesting the owner of the BEANUTILS-532 JIRA, commons-beanutils2.x has been released. > upgrade commons-beanutils to commons-beanutils2.x > ------------------------------------------------- > > Key: HIVE-28699 > URL: https://issues.apache.org/jira/browse/HIVE-28699 > Project: Hive > Issue Type: Improvement > Reporter: Raghav Aggarwal > Assignee: Raghav Aggarwal > Priority: Major > > commons-beanutils has CVE and it also transitively brings > commons-collections3.x. > After requesting the owner of the BEANUTILS-532 JIRA, commons-beanutils2.x > has been released. > -- This message was sent by Atlassian Jira (v8.20.10#820010)