Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jul 12, 2025

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package Change Age Confidence
org.apache.commons:commons-lang3 (source) 3.17.0 -> 3.18.0 age confidence

GitHub Vulnerability Alerts

CVE-2025-48924

Uncontrolled Recursion vulnerability in Apache Commons Lang.

This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.

The methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a StackOverflowError could cause an application to stop.

Users are recommended to upgrade to version 3.18.0, which fixes the issue.


Configuration

📅 Schedule: Branch creation - "" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link
Contributor

coderabbitai bot commented Jul 12, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate renovate bot force-pushed the renovate/commons-lang3.version branch 2 times, most recently from fcf8710 to e13142c Compare July 14, 2025 09:04
@renovate renovate bot force-pushed the renovate/commons-lang3.version branch from e13142c to 2777bc6 Compare July 28, 2025 05:01
@renovate renovate bot force-pushed the renovate/commons-lang3.version branch from 2777bc6 to 98b0f0d Compare August 14, 2025 11:42
@renovate renovate bot force-pushed the renovate/commons-lang3.version branch from 98b0f0d to 03c22d8 Compare August 25, 2025 03:00
@renovate renovate bot force-pushed the renovate/commons-lang3.version branch 2 times, most recently from a27f591 to d8e5fdb Compare September 13, 2025 09:51
@renovate renovate bot force-pushed the renovate/commons-lang3.version branch from d8e5fdb to 80c28ce Compare September 13, 2025 18:07
@renovate renovate bot force-pushed the renovate/commons-lang3.version branch from 80c28ce to 9270ff4 Compare September 15, 2025 03:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants