jxls

jxls copied to clipboard

#326: commons-beanutils:1.9.4 -> commons-beanutils2:2.0.0

4

see #326

SoltauFintel

Version 3.0.0 has contains CVE because of transitive dependency

5

Hi We migrated our project to library version 3.0.0 and it still contains vulnerable transitive dependency **commons-collections:commons-collections:3.2.2** (resolved through **commons-beanutils:commons-beanutils:1.9.4**) Can you exclude this vulnerable dependency from next minor release?...

ydrozhdzhal

Fix current CVE in JXLS 3.0.0

1

Hello, jxls-poi version 3.0.0 has 2 CVE from dependencies that would be easy to correct : - org.apache.poi : poi : 5.2.2 => upgrade to 5.2.4 - org.apache.commons : commons-compress...

uek06

version 2x for example ; Transformer transformer = TransformerFactory.createTransformer(is, os); ... JexlExpressionEvaluator evaluator = (JexlExpressionEvaluator) transformer.getTransformationConfig().getExpressionEvaluator(); Map functionMap = new HashMap(); functionMap.put("demo", new JexlCustomFunctionDemo()); evaluator.getJexlEngine().setFunctions(functionMap); How to use in 3.x?

fudewei1