Hello! We found a vulnerable dependency in your project. Are you aware of it?

[HelloMavenEco]

Hi! We spot a vulnerable dependency in your project, which might threaten your software.
And we found that the vulnerable function of this CVE can be easily accessed from your software.

• CVE_ID: CVE-2021-29425
• Vulnerable dependency: commons-io:commons-io
• Your invocation path to the vulnerable method:

com.mediaworx.mojo.opencms.AbstractOpenCmsMojo:attachFolder(java.lang.String,java.lang.String,java.io.File)
⬇️
org.apache.commons.io.FilenameUtils:normalize(java.lang.String)
⬇️
org.apache.commons.io.FilenameUtils:doNormalize(java.lang.String,char,boolean)
⬇️
org.apache.commons.io.FilenameUtils:getPrefixLength(java.lang.String)

Therefore, maybe you need to upgrade this dependency. Hope this can help you! 😄