Version 3.0.0 has contains CVE because of transitive dependency

[ydrozhdzhal]

Hi

We migrated our project to library version 3.0.0 and it still contains vulnerable transitive dependency commons-collections:commons-collections:3.2.2 (resolved through commons-beanutils:commons-beanutils:1.9.4)

Can you exclude this vulnerable dependency from next minor release?

More details: https://devhub.checkmarx.com/cve-details/Cx78f40514-81ff/