Fix CVE-2025-48924 (#4665)

RyanL1997 · web-flow · commit fcff083fd1a8 · 2025-10-29T13:17:55.000-07:00
diff --git a/build.gradle b/build.gradle
@@ -152,6 +152,9 @@ allprojects {
         resolutionStrategy.force 'org.apache.commons:commons-text:1.11.0'
         resolutionStrategy.force 'commons-io:commons-io:2.15.0'
         resolutionStrategy.force 'org.yaml:snakeyaml:2.2'
+        resolutionStrategy.dependencySubstitution {
+            substitute module('commons-lang:commons-lang') using module('org.apache.commons:commons-lang3:3.18.0') because 'CVE-2025-48924: commons-lang 2.x vulnerable to StackOverflowError'
+        }
     }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -152,6 +152,9 @@ allprojects {`
`152`	`152`	`resolutionStrategy.force 'org.apache.commons:commons-text:1.11.0'`
`153`	`153`	`resolutionStrategy.force 'commons-io:commons-io:2.15.0'`
`154`	`154`	`resolutionStrategy.force 'org.yaml:snakeyaml:2.2'`
	`155`	`+ resolutionStrategy.dependencySubstitution {`
	`156`	`+ substitute module('commons-lang:commons-lang') using module('org.apache.commons:commons-lang3:3.18.0') because 'CVE-2025-48924: commons-lang 2.x vulnerable to StackOverflowError'`
	`157`	`+ }`
`155`	`158`	`}`
`156`	`159`	`}`
`157`	`160`