Thanks for calling this out - however, the gwt-user dependency should never be on your runtime classpath, but only used when you compile/test/debug code for your project, so the scope her is limited.
Oddly, the non-maven build of GWT doesn't appear to include commons-text, I wonder if that is an oversight of the ant build, or if the dependency can simply be excluded.
I've filed https://github.com/gwtproject/gwt/issues/10370 to track this.
On Tuesday, July 14, 2026 at 9:45:21 AM UTC-5 had...@digitech.cz wrote:
Hello,
note that commons-text 1.9 used in gwt-user is having security issues,
so please upgrade this library to newer version if possible. This jar is
used by net.sourceforge.htmlunit library.
Cheers,
Mirza
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-web-toolkit/bcfd0ff7-466c-41e0-a26e-c5b2aaa97710n%40googlegroups.com.
No comments:
Post a Comment