升级依赖commons-lang版本,修复漏洞
Open
- Dominant language
- Java
- Stars
- 5.6k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
commons-lang 2.x版本存在漏洞,已不再维护, 是否可以将commons-lang 升级为3.x版本
Contributor guide
No contributing guide indexed for this repository
Research direction
Locate the project dependency declaration for commons-lang and inspect current usage for compatibility with the 3.x release. Run the existing Java test suite after the upgrade and confirm that the vulnerable 2.x dependency is no longer resolved and all tests pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100