Hello,
about 2 months ago I wrote already to this mailing list, mentioning that
the vulnerability reporting workflow is not ideal:
https://lists.apache.org/thread/zo1mlsfx79ylhzj8h9ojohbghp9lx24s
Back then Arnout Engelen responded and asked whether I could provide a
potential fix for the vuln
Hello,
it appears the mail address for the "Commons Security List" on
https://commons.apache.org/mail-lists.html which is specified by the
"Post" link in the table is wrong; it erroneously refers to
u...@commons.apache.org
Kind regards
--