Security issue in dependency - CWE-674 (uncontrolled recursion)

[webmariner]

Hi there,

Some scanning tools are reporting that commons-beanutils 1.9.4 uses a version of commons-collections (3.2.2) that's potentially vulnerable to stack overflow. More details here: https://issues.apache.org/jira/browse/COLLECTIONS-701

I tried updating the version of beanutils to beanutils2 2.0.0-M1, which uses collections 4.5.0-M3 where the issue has been fixed. It was a minor code change and the unit tests seem happy. I'll raise a PR and link to this issue shortly if that would help.

Many thanks,
James