Re: Apache commons-text security issues

Hi Mirza,

this is not a production jar as Colin pointed out. 

So if you are using the owasp plugin to find these, you can safely add this library to the owasp exclusions list - or setup you plugin/project so that you only scan libraries used in your deployable product. 

rg,

Leon.

On Tuesday, 14 July 2026 at 16:45:21 UTC+2 Mirza Hadžič wrote:

Hello,

note that commons-text 1.9 used in gwt-user is having security issues,
so please upgrade this library to newer version if possible. This jar is
used by net.sourceforge.htmlunit library.

Cheers,

Mirza

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-web-toolkit/0df8389b-9106-4603-98c0-a650b2da9f3bn%40googlegroups.com.