chore: use commons lang3 instead of commons lang - #28131
Conversation
|
Important Review skippedToo many files! This PR contains 210 files, which is 60 over the limit of 150. To get a review, narrow the scope: Upgrade to a paid plan to raise the limit. ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (210)
You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
|
PR builder started |
|
PR builder completed |
jenkins-is-staging
left a comment
There was a problem hiding this comment.
Approving the pull request based on the successful pr build https://github.com/wso2/product-is/actions/runs/28671062814



Purpose
Problem is related to CVE-2025-48924. The
org.wso2.charonhas latest version ofcommons-langis v2.6 as seen in this maven repository. It causes a vulnerability. I saw that similar issue is also reported with this issue related tocommons-langversion.The issue is already reported in this link
Goals
The commons-lang is replaced with commons-lang3 v3.18.0 to fix security vulnerability
This PR is already merged.